+高级检索
基于MeAEG-Net的异常流量检测方法研究
DOI:
作者:
作者单位:

作者简介:

通讯作者:

基金项目:


Research on Abnormal Traffic Detection Method Based on Memory Augment-generative Adversarial Network
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
    摘要:

    异常流量检测现有方法大都是基于有监督的学习,在现实生活中获取并标记异常流量数据样本是极为困难的,存在诸多限制.此外,由于网络异常数据的多样性和复杂性,各种检测方法的自适应性较差,对新出现的异常流量难以判断.针对上述问题,本文设计了一个基于生成对抗网络和记忆增强模块的半监督异常流量检测框架MeAEG-Net(Memory Augment Based on Generative Adversarial Network),通过只训练正常流量样本数据,比较生成器模块输入流量底层特征的重构误差来达到检测异常的目的.在模型中使用生成对抗网络来更好地训练生成器,生成器采用自编码器加解码器的结构来解决自编码器易受噪声影响的问题,并在自编码器子网络中添加记忆增强模块来削弱生成器模块的泛化能力,增大异常流量的重构误差.实验证明,本文提出的方法能在只学习正常流量数据样本的前提下达到很好的异常流量检测效果.

    Abstract:

    Most of the existing abnormal traffic methods are based on supervised learning. It is extremely difficult to obtain and mark abnormal traffic data samples in real life, and there are many limitations. In addition, due to the diversity and complexity of abnormal network data, the adaptability of various detection methods is poor, and it is difficult to judge the new abnormal traffic. Based on the above problems, this paper designs a semi-supervised abnormal flow detection framework, MeAEG-Net (Memory Augment Based on Generative Adversarial Network), to detect anomalies by training only normal flow sample data and comparing the reconstruction errors of the underlying characteristics of input flow of generator module. A generative adversarial network is used in the model to better train the generator. The generator adopts the structure of an autoencoder and decoder to solve the problem that the autoencoder is susceptible to noise. The memory-augmented module is added to the sub-network of the autoencoder to weaken the generalization ability of the generator module and increase the reconstruction error of abnormal traffic. Experimental results show that the method proposed in this paper can achieve a good effect on abnormal traffic detection under the premise of learning only normal traffic data samples. Finally, the future research direction and challenges have been prospected.

    参考文献
    相似文献
    引证文献
文章指标
  • PDF下载次数:
  • HTML阅读次数:
  • 摘要点击次数:
  • 引用次数:
引用本文

黎文伟 ?,岳子乔 ,王涛 .基于MeAEG-Net的异常流量检测方法研究[J].湖南大学学报:自然科学版,2023,(2):63~73

复制
历史
  • 收稿日期:
  • 最后修改日期:
  • 录用日期:
  • 在线发布日期: 2023-03-06
  • 出版日期:
作者稿件一经被我刊录用,如无特别声明,即视作同意授予我刊论文整体的全部复制传播的权利,包括但不限于复制权、发行权、信息网络传播权、广播权、表演权、翻译权、汇编权、改编权等著作使用权转让给我刊,我刊有权根据工作需要,允许合作的数据库、新媒体平台及其他数字平台进行数字传播和国际传播等。特此声明。
关闭