2.118

影响因子

    高级检索

    多视角特征融合的网络异常流量检测

    Network Anomaly Traffic Detection via Multi-view Feature Fusion

    • 摘要: 传统的异常流量检测方法基于单一视角分析,在处理复杂攻击和加密通信时具有明显的局限性。提出一种多视角特征融合的网络异常流量检测方法,分别基于时序视角和交互视角对网络流量中数据包的时序关系及交互关系建模,学习其时序特征与交互特征,并将不同视角下的特征融合进行异常流量的检测。在 6个真实的流量数据集上进行的大量实验表明,所提方法在网络异常流量检测方面具有优异的性能,弥补了单一视角下检测的不足。

       

      Abstract: Traditional anomalous traffic detection methods, based on single-view analysis, have obvious limitations in dealing with complex attacks and encrypted communications. To address this, the paper proposes a network anomaly traffic detection method via multi-view feature fusion (MuFF). MuFF models the temporal and interactive relationships of packets in network traffic based on the temporal and interactive viewpoints respectively. It learns temporal and interactive features. These features are then fused from different perspectives for anomaly traffic detection. Extensive experiments on six real traffic datasets show that MuFF has excellent performance in network anomalous traffic detection, which makes up for the shortcomings of detection under a single perspective.

       

    /

    返回文章
    返回