基于深度强化学习模型融合的海洋气象传感器网络入侵检测方法  

Intrusion detection based on deep reinforcement learning model fusion for maritime meteorological sensor networks

作　　者：张文潇 苏新[1] 顾依凌 ZHANG Wenxiao;SU Xin;GU Yiling(College of Information Science and Engineering,Hohai University,Changzhou 213000,China)

机构地区：[1]河海大学信息科学与工程学院,江苏常州213000

出　　处：《物联网学报》2025年第1期89-102,共14页Chinese Journal on Internet of Things

基　　金：国家自然科学基金资助项目(No.62371181);常州市政策引导类计划国际科技合作/港澳台科技合作项目(No.CZ20230029)。

摘　　要：海洋气象传感器网络(MMSN,maritime meteorological sensor network)有别于传统陆地组网,入侵检测任务在海洋气象传感器网络场景下面临着新的挑战。利用卫星通信技术设计一种海洋气象传感器网络卫星检测方法,分析海洋气象传感器网络的网络结构和特点。从算法和损失函数的角度入手,对提高入侵检测系统(IDS,intrusion detection system)检测性能的方法展开研究,提出了一种基于深度强化学习模型融合的海洋气象传感器网络入侵检测方法。首先,建立改进损失函数的轻量梯度提升机(LightGBM,light gradient boosting machine)、一维卷积神经网络(1D-CNN,1D conventional neural network)和二维卷积神经网络(2D-CNN,2D conventional neural network)分类器,综合提取海洋气象传感器网络入侵检测数据的时序特征和空间特征。其次,根据模型融合技术中的堆叠和平均原理,设计一个基于以上基分类器的模型融合方法,采纳基学习器的优势而规避其劣势,从而提高系统整体检测性能。最后,仿真实验结果表明,所提的入侵检测方法能够有效地提高入侵检测系统对少数类攻击数据的检测性能,并提高系统的稳健性。Maritime meteorological sensor networks(MMSN)differ from traditional land-based networks,presenting new challenges for intrusion detection tasks.A satellite-based detection method for maritime meteorological sensor networks was designed using satellite communication technology.The network structure and characteristics of maritime meteorological sensor networks were analyzed in this method.Research was conducted on improving the detection performance of intrusion detection systems(IDS)from the perspectives of algorithms and loss functions.A maritime meteorological sensor network intrusion detection method based on the fusion of deep reinforcement learning models was proposed.Firstly,light gradient boosting machine(LightGBM),1D conventional neural network(1D-CNN),and 2D conventional neural network(2D-CNN)classifiers with improved loss functions were established to comprehensively extract the temporal and spatial features of the intrusion detection data in maritime meteorological sensor networks.Secondly,a model fusion method was designed based on the stacking and averaging principles of model fusion technology.This method leveraged the strengths of the base classifiers and mitigated their weaknesses,thereby enhancing the overall system detection performance.Finally,simulation experiment results demonstrate that the proposed intrusion detection method can effectively improve the detection performance for a few types of attack data and enhance the robustness of the system.

关 键 词：海洋气象传感器网络 入侵检测系统 模型融合 焦点损失函数 

分 类 号：TN929.52[电子电信—通信与信息系统]