刘文琪, 葛红娟, 闫洁, 李煌, 李诗佳. 基于DeepInsight和迁移学习的入侵检测技术研究[J]. 工程科学学报. DOI: 10.13374/j.issn2095-9389.2024.03.01.002
引用本文: 刘文琪, 葛红娟, 闫洁, 李煌, 李诗佳. 基于DeepInsight和迁移学习的入侵检测技术研究[J]. 工程科学学报. DOI: 10.13374/j.issn2095-9389.2024.03.01.002
Research on Network Intrusion Detection Technology Based on DeepInsight and Transfer Learning[J]. Chinese Journal of Engineering. DOI: 10.13374/j.issn2095-9389.2024.03.01.002
Citation: Research on Network Intrusion Detection Technology Based on DeepInsight and Transfer Learning[J]. Chinese Journal of Engineering. DOI: 10.13374/j.issn2095-9389.2024.03.01.002

基于DeepInsight和迁移学习的入侵检测技术研究

Research on Network Intrusion Detection Technology Based on DeepInsight and Transfer Learning

  • 摘要: 针对入侵检测研究中,入侵检测训练样本较少、样本不平衡等问题,本文提出一种基于DeepInsight和迁移学习的入侵检测方法DI-TL-CNN (DeepInsight-Transfer learning-Convolutional Neural Network,DI-TL-CNN)。该入侵检测方法使用DeepInsight方法进行预处理,将入侵数据集转为适合CNN模型输入的图像数据集。选取CNN模型中的VGG16模型作为基本学习模型,迁移学习将预训练后的CNN模型迁移至当前任务中。通过冻结和微调CNN模型中不同的模块参数,本文提出4种迁移方案。在UNSW-NB15网络入侵数据集上进行实验,4种迁移方案结果表明,DI-TL-CNN模型微调方法结合迁移学习,微调的参数越多,模型提取顶层特征能力越强,模型的综合性能越好。本文开展了比较研究,实验结果表明,基于DI-TL-CNN模型的方法的准确率和模型的性能优于其他检测方法,具有良好的应用前景。

     

    Abstract: For the problems such as less intrusion training samples and unbalanced samples are existing in intrusion detection research, this paper proposes an intrusion detection method based on DeepInsight and Transfer learning DI-TL-CNN (DI-TL-CNN). The intrusion detection method uses DeepInsight method to preprocess the intrusion data set into the image data set suitable for CNN model input. VGG16 model in CNN model is selected as the basic learning model, and transfer learning transfers the pre-trained CNN model to the current task. By freezing and fine-tuning different module parameters in the CNN model, four transfer schemes are proposed. Experiments were carried out on UNSW-NB15 network intrusion dataset, and the results of four migration schemes showed that the DI-TL-CNN model fine-tuning method combined with transfer learning, the more parameters fine-tuned, the stronger the ability of the model to extract top-level features, and the better the comprehensive performance of the model. The experimental results show that the method based on DI-TL-CNN model is superior to other detection methods in accuracy and performance, and has a good application prospect.

     

/

返回文章
返回