• •    

基于优化数据处理的DBN模型的入侵检测研究

陈虹,万广雪,肖振久   

  1. 辽宁工程技术大学
  • 收稿日期:2016-11-04 修回日期:2016-12-25 发布日期:2016-12-25
  • 通讯作者: 万广雪

Research on Intrusion Detection Based on Data Optimization Deep Belief Network Model

Guang-Xue Wan 2   

  • Received:2016-11-04 Revised:2016-12-25 Online:2016-12-25
  • Contact: Guang-Xue Wan

摘要: 针对目前网络中存在着对已知攻击类型的入侵检测具有较高的检测率,但对新出现的攻击类型难以识别的缺陷问题,提出了一种基于优化数据处理的DBN模型的入侵检测方法。在不破坏已学习过的知识和不严重影响检测实时性的基础上,分别对数据处理和方法模型进行改进,以解决上述问题。将经过PMF编码和MaxMin归一化处理的数据应用于DBN模型中,并通过固定其他参数不变而变化一种参数和交叉验证的方式选择相对最优的DBN结构对未知攻击类型进行检测,在NSL-KDD数据集上进行了验证。实验结果表明,数据的优化处理能够使DBN模型提高分类精度,基于DBN的入侵检测方法具有良好的自适应性,对未知样本具有较高的识别能力。在检测实时性上,与SVM算法和BP网络算法相当。

关键词: 入侵检测, 信息安全, 优化数据处理, 深度学习, 深度信念网络, 未知攻击检测

Abstract: ince those well-known types of intrusions can be detected with higher detection rate at present, but it is very difficult to detect those new-emerging unknown types of network intrusions, a network intrusion detection method based on data optimization deep belief network model was proposed .The above issue will be solved from the method of data processing and model respectively without destroying the existing knowledge and increasing detection time seriously. PMF encoding and MaxMin normalization processing data are applied to DBN model, and the DBN structure is selected through fixing others and changing a parameter, which is based on the benchmark NSL-KDD dataset. Experimental results show that, data optimization impacts on the classification and the intrusion detection method based on DBN algorithm in this paper is self-adaptive. Besides, the detection time of DBN algorithm is similar with that of SVM algorithm and BP neural network model.

Key words: intrusion detection, information security, data optimization, deep learning, deep belief network(DBN), unknown types detection

中图分类号: