半监督环境下基于AE-ELM模型的工业网络安全防御研究  

Research on Industrial Network Security Defense Based on AE-ELM Model in Semi-Supervised Environment

作　　者：李媛 刘海峰 曹博涛[2] LI Yuan;LIU Haifeng;CAO Botao(Beijing Municipal Administration Information Security Center,Beijing 100000,China;School of Mechanical and Electrical Engineering,Shanxi University of Science and Technology,Xi'an 710021,China)

机构地区：[1]北京市政务信息安全保障中心,北京100000 [2]陕西科技大学机电工程学院,西安710021

出　　处：《计算机测量与控制》2023年第12期244-250,共7页Computer Measurement &Control

摘　　要：针对工业网络中存在的入侵风险和安全性防御问题,在半监督网络环境下提出一种基于AE-ELM模型的工业网络安全防御方法;通过不同网络环境下攻击程序、恶意数据或恶意代码的攻击原理,设置了适用于工业网络入侵防御与检测的标准;采集符合入侵检测要求的工业网络实时数据并构建数据集,在半监督的网络模式下构建AE-ELM模型,并基于该模型提取输入工业网络数据的特征,通过与设置检测标准的对比与匹配,得出工业网络攻击类型的检测结果;根据网络攻击类型,从边界、传输通道、终端等方面进行防御部署,实现工业网络的安全防御;根据与传统防御方法的对比测试结果得出如下结论:综合考虑两种攻击场景,在优化设计方法的防御作用下,工业网络的数据丢失率和篡改率分别降低约4.36%和2.35%,即优化设计方法具有更高的安全防御效果。Aiming at intrusion risk and security defense problems in industrial network,in semi-supervised network environment,an industrial network security defense method based on AE-ELM model is proposed.Based on the attack principles of attack pro-grams,malicious data or malicious codes in different network environments,the method sets up the standards for intrusion prevention and detection of industrial networks,collects the real-time data of industrial network meeting the requirements of intrusion detection,constructs the data set.builds the AE-ELM model in the semi-supervised network mode,and extracts the data features of industrial network based on the model.The detection results of industrial network attack types are obtained by comparing and matching with the set detection standards.According to the types of network attacks,the defense is deployed from the aspects of boundaries,transmis-sion channels,and terminals to achieve the security defense of industrial networks.According to the comparison test with traditional defense methods,the test results show that comprehensively considering the two attack scenarios and under the defense function of the optimal design method,the data loss rate and tampering rate of the industrial network are reduced by about 4.36% and 2.35% re-spectively,that is,the optimal design method has a higher security defense effect.

关 键 词：半监督环境 AE-ELM模型 工业网络 安全防御 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]