基于优化数据处理的深度信念网络模型的入侵检测方法

doi:10.11772/j.issn.1001-9081.2017.06.1636

计算机应用 ›› 2017, Vol. 37 ›› Issue (6): 1636-1643.DOI: 10.11772/j.issn.1001-9081.2017.06.1636

基于优化数据处理的深度信念网络模型的入侵检测方法

陈虹, 万广雪, 肖振久

辽宁工程技术大学软件学院, 辽宁葫芦岛 125105

收稿日期:2016-11-04 修回日期:2016-12-26 出版日期:2017-06-10 发布日期:2017-06-14
通讯作者: 万广雪
作者简介:陈虹(1967-),女,辽宁阜新人,副教授,硕士,CCF会员,主要研究方向:信息安全;万广雪(1992-),女,辽宁大连人,硕士研究生,主要研究方向:信息安全、深度学习;肖振久(1968-),男,内蒙宁城人,副教授,硕士,CCF会员,主要研究方向:信息安全。
基金资助:
辽宁省教育厅科学技术研究项目（LJYL052）。

Intrusion detection method of deep belief network model based on optimization of data processing

CHEN Hong, WAN Guangxue, XIAO Zhenjiu

School of Software, Liaoning Technical University, Huludao Liaoning 125105, China

Received:2016-11-04 Revised:2016-12-26 Online:2017-06-10 Published:2017-06-14
Supported by:
This work is partially supported by the Science and Technology Research Project of Liaoning Education Department (LJYL052).

摘要/Abstract

摘要： 针对目前网络中存在的对已知攻击类型的入侵检测具有较高的检测率，但对新出现的攻击类型难以识别的缺陷问题，提出了一种基于优化数据处理的深度信念网络（DBN）模型的入侵检测方法。该方法在不破坏已学习过的知识和不严重影响检测实时性的基础上，分别对数据处理和方法模型进行改进，以解决上述问题。首先，将经过概率质量函数（PMF）编码和MaxMin归一化处理的数据应用于DBN模型中；然后，通过固定其他参数不变而变化一种参数和交叉验证的方式选择相对最优的DBN结构对未知攻击类型进行检测；最后，在NSL-KDD数据集上进行了验证。实验结果表明，数据的优化处理能够使DBN模型提高分类精度，基于DBN的入侵检测方法具有良好的自适应性，对未知样本具有较高的识别能力。在检测实时性上，所提方法与支持向量机（SVM）算法和反向传播（BP）网络算法相当。

关键词: 入侵检测, 优化数据处理, 深度学习, 深度信念网络, 未知攻击检测

Abstract: Those well-known types of intrusions can be detected with higher detection rate in the network at present, but it is very difficult to detect those new unknown types of network intrusions. In order to solve the problem, a network intrusion detection method of Deep Belief Network (DBN) model based on optimization of data processing was proposed. The data processing and method model were improved respectively without destroying the existing knowledge and increasing detection time seriously to solve the above problem. Firstly, the data processed by Probability Mass Function (PMF) encoding and MaxMin normalization was applied to the DBN model. Then, the relatively optimal DBN structure was selected through fixing other parameters, changing a parameter and the cross validation. Finally, the proposed method was tested on the benchmark NSL-KDD dataset. The experimental results show that, the optimization of data processing can improve the classification accuracy of the DBN model, the proposed intrusion detection method based on DBN has good adaptability and higher recognition ability of unknown samples. The detection time of DBN algorithm is similar to that of Support Vector Machine (SVM) algorithm and Back Propagation (BP) neural network model.

Key words: intrusion detection, optimization of data processing, deep learning, Deep Belief Network (DBN), unknown attack detection

中图分类号:

TP393.08

陈虹, 万广雪, 肖振久. 基于优化数据处理的深度信念网络模型的入侵检测方法[J]. 计算机应用, 2017, 37(6): 1636-1643.

CHEN Hong, WAN Guangxue, XIAO Zhenjiu. Intrusion detection method of deep belief network model based on optimization of data processing[J]. Journal of Computer Applications, 2017, 37(6): 1636-1643.

参考文献

[1] 卿斯汉,蒋建春,马恒太,等.入侵检测技术研究综述[J].通信学报,2004,25(7):19-29.(QING S H, JIANG J C, MA H T, et al. Research on intrusion detection techniques:a survey[J]. Journal of China Institute of Communications, 2004, 25(7):19-29.)
[2] 潘志松.基于神经网络的入侵检测研究[D].南京:南京航空航天大学,2003:20-64.(PAN Z S. Research on intrusion detection based on neural network[D]. Nanjing University of Aeronautics and Astronautics, 2003:20-64.)
[3] 胡明霞.基于BP神经网络的入侵检测算法[J].计算机工程,2012,38(6):148-150.(HU M X. Intrusion detection algorithm based on BP neural network[J]. Computer Engineering, 2012, 38(6):148-150.)
[4] 杨雅辉,姜电波,沈晴霓,等.基于改进的GHSOM的入侵检测研究[J].通信学报,2011,32(1):121-126.(YANG Y H, JIANG D B, SHEN Q N, et al. Research on intrusion detection based on an improved GHSOM[J]. Journal on Communications, 2011, 32(1):121-126.)
[5] 杨雅辉,黄海珍,沈晴霓,等.基于增量式GHSOM神经网络模型的入侵检测研究[J].计算机学报,2014,37(5):1216-1224.(YANG Y H, HUANG H Z, SHEN Q N, et al. Research on intrusion detection based on incremental GHSOM[J]. Chinese Journal of Computers, 2014, 37(5):1216-1224.)
[6] 毛国君,宗东军.基于多维数据流挖掘技术的入侵检测模型与算法[J].计算机研究与发展,2009,46(4):602-609.(MAO G J, ZONG D J. An intrusion detection model based on mining multi-dimension data streams[J]. Journal of Computer Research and Development, 2009, 46(4):602-609.)
[7] 郭春.基于数据挖掘的网络入侵检测关键技术研究[D].北京:北京邮电大学,2014:89-106.(GUO C. Research on key technologies of network intrusion detection based on data mining[D]. Beijing:Beijing University of Posts and Telecommunications, 2014:89-106.)
[8] 饶鲜,董春曦,杨绍全.基于支持向量机的入侵检测系统[J].软件学报,2003,14(4):798-803.(RAO X, DONG C X, YANG S Q. An intrusion detection system based on support vector machine[J]. Journal of Software, 2003, 14(4):798-803.)
[9] 罗敏,王丽娜,张焕国.基于无监督聚类的入侵检测方法[J].电子学报,2003,31(11):1713-1716.(LUO M, WANG L N, ZHANG H G. An unsupervised clustering-based intrusion detection method[J]. Acta Electronica Sinica, 2003, 31(11):1713-1716.)
[10] HINTON G E, SALAKHUTDINOV R R. Reducing the dimensionality of data with neural networks[J]. Science, 2006, 313(5786):504-507.
[11] DONG Y, LI D. Deep learning and its applications to signal and information processing[J]. IEEE Signal Processing Magazine, 2011, 28(1):145-154.
[12] AREL I, ROSE D C, KARNOWSKI T P. Deep machine learning-a new frontier in artificial intelligence research[J]. IEEE Computational Intelligence Magazine, 2010, 5(4):13-18.
[13] 逯玉婧.基于深度信念网络的入侵检测算法研究[D].石家庄:河北师范大学,2016:26-46.(LU Y J. Research on intrusion detection algorithm based on deep belief network[D]. Shijiazhuang:Hebei Normal University, 2016:26-46.)
[14] ALOM M Z, BONTUPALLI V R, TAHA T M. Intrusion detection using deep belief networks[C]//Proceedings of the 2015 National Aerospace and Electronics Conference. Piscataway, NJ:IEEE, 2015:339-344.
[15] GAO N, GAO L, HE Y Y, et al. Intrusion detection model based on deep belief nets[J]. Journal of Southeast University (English Edition), 2015, 31(3):339-346.
[16] 杨昆朋.基于深度学习的入侵检测[D].北京:北京交通大学,2015:31-47.(YANG K P. Intrusion detection based on deep learning[D]. Beijing:Beijing Jiaotong University, 2015:31-47.)
[17] 安琪.基于深度置信网络的入侵检测研究[D].兰州:兰州大学,2016:20-50.(AN Q. Research on intrusion detection based on depth confidence network[D]. Lanzhou:Lanzhou University, 2016:20-50.)
[18] HINTON G E. Training products of experts by minimizing contrastive divergence[J]. Neural Computation, 2002, 14(8):1771-800.
[19] SAID D, STIRLING L, FEDEROLF P, et al. Data preprocessing for distance-based unsupervised intrusion detection[C]//Proceedings of the 2011 Ninth Annual International Conference on Privacy, Security and Trust. Piscataway, NJ:2011:181-188.
[20] SALEM M, BUEHLER U. Mining techniques in network security to enhance intrusion detection systems[J]. International Journal of Network Security & Its Applications, 2012, 4(6):167-172.
[21] 白雪.基于DBN的网络流量分类的研究[D].呼和浩特:内蒙古大学,2015:18-30.(BAI X. Research on network traffic classification based on DBN[D]. Huhhot:Inner Mongolia University, 2015:18-30.)
[22] DHANABAL L, SHANTHARAJAH S P. A study on NSL-KDD dataset for intrusion detection system based on classification algorithms[J]. International Journal of Advanced Research in Computer and Communication Engineering, 2015, 4(6):446-452.
[23] HINTON G E. A practical guide to training restricted Boltzmann machines[M]//Neural Networks:Tricks of the Trade, LNCS 7700. Berlin:Springer, 2012:599-619.
[24] 张春霞,姬楠楠,王冠伟.受限波尔兹曼机[J].工程数学学报,2015, 32(2):159-173.(ZHANG C X, JI N N, WANG G W, et al. Restricted Boltzmann machine[J]. Chinese Journal of Engineering Mathematics, 2015, 32(2):159-173.)
[25] 邱龙金,贺昌政.神经网络稳定性的交叉验证模型[J].计算机工程与应用,2010,46(34):43-45.(QIU J L, HE C Z. Cross validation model for stability of neural networks[J]. Computer Engineering and Applications, 2010, 46(34):43-45.)
[26] 范永东.模型选择中的交叉验证方法综述[D].太原:山西大学,2013:19-41.(FAN Y D. A summary of cross-validation in model selection[D]. Taiyuan:Shanxi University, 2013:19-41.)
[27] CHANG C C, LIN C J. LIBSVM:a library for support vector machines[J]. ACM Transactions on Intelligent Systems and Technology, 2011, 2(3):389-396.
[28] 贺其备.基于支持向量机的入侵检测研究[D].长春:东北师范大学,2013:29-44.(HE Q B. Research on intrusion detection based on support vector machine[D]. Changchun:Northeast Normal University, 2013:29-44.)

基于优化数据处理的深度信念网络模型的入侵检测方法

Intrusion detection method of deep belief network model based on optimization of data processing

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	赵宏, 孔东一. 图像特征注意力与自适应注意力融合的图像内容中文描述[J]. 计算机应用, 2021, 41(9): 2496-2503.
[2]	徐江浪, 李林燕, 万新军, 胡伏原. 结合目标检测的室内场景识别方法[J]. 计算机应用, 2021, 41(9): 2720-2725.
[3]	陈成瑞, 孙宁, 何世彪, 廖勇. 面向C-V2X通信的基于深度学习的联合信道估计与均衡算法[J]. 计算机应用, 2021, 41(9): 2687-2693.
[4]	郑志强, 胡鑫, 翁智, 王雨禾, 程曦. 基于改进DenseNet的牛眼图像特征提取方法[J]. 计算机应用, 2021, 41(9): 2780-2784.
[5]	谢德峰, 吉建民. 融入句法感知表示进行句法增强的语义解析[J]. 计算机应用, 2021, 41(9): 2489-2495.
[6]	代雨柔, 杨庆, 张凤荔, 周帆. 基于自监督学习的社交网络用户轨迹预测模型[J]. 计算机应用, 2021, 41(9): 2545-2551.
[7]	张师鹏, 李永忠, 杜祥通. 基于半监督学习和三支决策的入侵检测模型[J]. 计算机应用, 2021, 41(9): 2602-2608.
[8]	何正海, 线岩团, 王蒙, 余正涛. 融合句法指导与字符注意力机制的案情阅读理解方法[J]. 计算机应用, 2021, 41(8): 2427-2431.
[9]	曹玉红, 徐海, 刘荪傲, 王紫霄, 李宏亮. 基于深度学习的医学影像分割研究综述[J]. 计算机应用, 2021, 41(8): 2273-2287.
[10]	秦斌斌, 彭良康, 卢向明, 钱江波. 司机分心驾驶检测研究进展[J]. 计算机应用, 2021, 41(8): 2330-2337.
[11]	杜炎, 吕良福, 焦一辰. 基于模糊推理的模糊原型网络[J]. 计算机应用, 2021, 41(7): 1885-1890.
[12]	高钦泉, 黄炳城, 刘文哲, 童同. 基于改进CenterNet的竹条表面缺陷检测方法[J]. 计算机应用, 2021, 41(7): 1933-1938.
[13]	侯笑晗, 金国栋, 谭力宁, 薛远亮. 基于自适应和最优特征的合成孔径雷达舰船检测方法[J]. 计算机应用, 2021, 41(7): 2150-2155.
[14]	李亚芳, 梁烨, 冯韦玮, 祖宝开, 康玉健. 基于社区优化的深度网络嵌入方法[J]. 计算机应用, 2021, 41(7): 1956-1963.
[15]	王月, 江逸茗, 兰巨龙. 基于改进三元组网络和K近邻算法的入侵检测[J]. 计算机应用, 2021, 41(7): 1996-2002.