基于时间因子和复合CNN结构的网络安全态势评估  

Network Security Situation Based on Time Factor and Composite CNN Structure

作　　者：赵冬梅[1,2] 宋会倩 张红斌[3] ZHAO Dong-mei;SONG Hui-qian;ZHANG Hong-bin(College of Computer and Cyber Security,Hebei Normal University,Shijiazhuang 050024,China;Hebei Key Laboratory of Network and Information Security,Hebei Normal University,Shijiazhuang 050024,China;School of Information Science and Engineering,Hebei University of Science and Technology,Shijiazhuang 050018,China)

机构地区：[1]河北师范大学计算机与网络空间安全学院,石家庄050024 [2]河北师范大学河北省网络与信息安全重点实验室,石家庄050024 [3]河北科技大学信息科学与工程学院,石家庄050018

出　　处：《计算机科学》2021年第12期349-356,共8页Computer Science

基　　金：国家自然科学基金(61672206);中央引导地方科技发展资金项目(216Z0701G);河北省重点研发计划基金资助项目(20310701D);河北省自然科学基金(F2019205163)。

摘　　要：为了解决传统的网络安全态势感知研究方法在网络信息复杂情况下准确率不高等缺陷,文中结合深度学习,提出了一种基于时间因子和复合CNN结构的网络安全态势评估模型,将卷积分解技术和深度可分离技术相结合,形成4层串联复合最优单元结构;将一维网络数据转换为二维矩阵,以灰度值的形式载入神经网络模型,从而有效发挥卷积神经网络的优势。为充分利用数据间的时序关系,引入时间因子形成融合数据,使网络同时学习具备时序关系的原始数据和融合数据,增强模型的特征提取能力,同时利用时间因子和点卷积建立时序数据的空间映射,提高模型结构的完整性。实验结果证明,所提模型在两个数据集上的准确率分别达到了92.89%和92.60%,相比随机森林和LSTM算法提升了2%~6%。In order to solve the problem of low accuracy of traditional network security situation awareness research methods in the case of complex network information, combined with deep learning, this paper proposes a network security situation assessment model based on time factor and composite CNN structure, which combines volume integral solution technology and deep separable technology to form a four layer series composite optimal unit structure.The one-dimensional network data are transformed into two-dimensional matrix and loaded into the neural network model in the form of gray value, so as to give full play to the advantages of convolution neural network.In order to make full use of the time-series relationship between data, time factor is introduced to form fusion data, which makes the network to learn the original data and fusion data with time-series relationship at the same time, the feature extraction ability of the model is increased, the spatial mapping of time-series data is established by using time factor and point convolution, and the integrity of the model structure is increased.Experimental results show that the accuracy of the proposed model on two datasets is 92.89% and 92.60% respectively, which is 2%~6% higher than random fo-rest and LSTM algorithm.

关 键 词：态势感知 卷积网络 时间因子 深度可分离卷积 卷积分解 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]