一种基于LMDR和CNN的混合入侵检测模型  

A Hybrid Model of Intrusion Detection Based on LMDR and CNN

作　　者：李桥 龙春 魏金侠[2] 赵静 LI Qiao;LONG Chun;WEI Jinxia;ZHAO Jing(University of Chinese Academy of Sciences,Beijing 101408,China;Computer Network Information Center,Chinese Academy of Sciences,Beijing 100080,China)

机构地区：[1]中国科学院大学,北京101408 [2]中国科学院计算机网络信息中心,北京100080

出　　处：《信息网络安全》2020年第9期117-121,共5页Netinfo Security

基　　金：中国科学院信息化专项[XXH13507,XXH13513-07]。

摘　　要：随着网络安全技术的飞速发展和大数据技术的广泛应用,传统的机器学习模型已难以满足大数据环境下高效入侵检测的要求。针对原始数据集特征不够明显的情况,利用卷积神经网络进行大数据特征提取与数据分析的优势,文章提出一种基于对数边际密度比(Logarithm Marginal Density Ratio,LMDR)和卷积神经网络(Convotional Neural Network,CNN)的混合入侵检测模型。该模型相较于现有传统的机器学习算法和神经网络模型,能够更充分挖掘数据特征间的联系,有效提高分类准确率并降低误报率。With the rapid development of network security technology and the big data technology,the traditional machine learning model has been difficult to meet the requirements of efficient intrusion detection in big data environment.For this reason,considering the advantages of convolutional neural network in feature extraction and data analysis,this paper proposed a mixed intrusion detection model based on logarithm marginal density ratio and convolutional neural network in view of the fact that the characteristics of the original dataset was not obvious enough.Compared with the traditional machine learning algorithm and neural network model,our hybrid model can make full use of the relationship between features for feature enhancement,and effectively improve the classification accuracy and reduce the false alarm rate.

关 键 词：入侵检测 对数边际密度比(LMDR) 卷积神经网络(CNN) 数据挖掘 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]