Aiming at the intrusion detection method of deep neural network
there are two problems of data imbalance and feature redundancy in the training process
resulting in low detection rate and high false positive rate. Based on Twice Decision Deep Learning model(TDDL) is proposed: The model is a combination of Deep Stack Autoencoder(DSAE) and neural network
including two-stage feature learning
in which the first stage uses DSAE to compress features and add probability value features that distinguish abnormal data
and the second stage uses neural networks(NN) receives the characteristics of the first stage and trains
thereby reducing the feature redundancy and balance bias on normal data to improve the detection effect. The experimental results of KDDCUP99 dataset show that the model can effectively improve the effect of deep neural network on feature detection of intrusion detection data
so that it has higher accuracy and lower false positive rate.
关键词
Keywords
references
HINTON G E, OSINDERO S, TEH Y W. A Fast Learning Algorithm for Deep Belief Nets[J]. Neural Computation, 2006, 18(7):1527-1554. DOI: 1527
GAO N, GAO L, GA Q, et al. An intrusion detection model based on deep belief networks[C]//2014 Second International Conference on Advanced Cloud and Big Data. IEEE, 2014: 247-252.
YU Y, LONG J, LIU F, et al. Machine learning combining with visualization for intrusion detection: a survey[C]//International Conference on Modeling Decisions for Artificial Intelligence. Springer, Cham, 2016: 239-249.
YU Y, LONG J, CAI Z. Network intrusion detection through stacking dilated convolutional autoencoders[J]. Security and Communication Networks, 2017: 1-10. DOI: 1
AUNG Y Y, MIN M M. Hybrid Intrusion Detection System Using K-Means and Classification and Regression Trees Algorithms[C]//2018 IEEE 16th International Conference on Software Engineering Research, Management and Applications (SERA). IEEE, 2018: 195-199.
ZHENG K, CAI Z, ZHANG X, et al. Algorithms to speedup pattern matching for network intrusion detection systems[J]. Computer Communications, 2015, 62:47-58. DOI: 47
CAI Z, WANG Z, ZHENG K, et al. A Distributed TCAM Coprocessor Architecture for Integrated Longest Prefix Matching, Policy Filtering, and Content Filtering[J]. IEEE Transactions on Computers, 2013, 62(3):417-427. DOI: 417
Hongwei D, Liang W. Research on Intrusion Detection Based on KPCA-BP Neural Network[C]//2018 IEEE 18th International Conference on Communication Technology (ICCT). IEEE, 2018: 911-915.
SOMMER R, PAXSON V. Outside the closed world: On using machine learning for network intrusion detection[C]//2010 IEEE symposium on security and privacy. IEEE, 2010: 305-316.
VINCENT P, LAROCHELLE H, LAJOIE I, et al. Stacked Denoising Autoencoders: Learning Useful Representations in a Deep Network with a Local Denoising Criterion[J]. Journal of Machine Learning Research, 2010, 11(12):3371-3408. DOI: 3371
WU S X, BANZHAF W. The use of computational intelligence in intrusion detection systems: A review[J]. Applied soft computing, 2010, 10(1): 1-35. DOI: 1