论文标题

使用CNN体系结构对网络系统中的异常行为进行分析

Analysis of Anomalous Behavior in Network Systems Using Deep Reinforcement Learning with CNN Architecture

论文作者

Modirrousta, Mohammad Hossein, Arani, Parisa Forghani, Shoorehdeli, Mahdi Aliyari

论文摘要

为了访问网络,已经设计了不同类型的入侵攻击,并且攻击者正在努力改进它们。由于对它们的依赖越来越大,计算机网络在日常生活中变得越来越重要。鉴于这种情况,很明显,各种类型的攻击需要具有高检测精度和可靠性的算法。本文的目的是开发一种基于深入增强学习的入侵检测系统。基于马尔可夫决策过程,所提出的系统可以根据大量数据生成适合分类任务的信息表示。从两个不同的角度考虑了增强学习,即深Q学习和双重深度Q学习。不同的实验表明,在这两种方法中,所提出的系统的精度比UNSW-NB15数据集的准确度为99.17 \%$ $,这是基于对比度学习和LSTM-AUTOCONECODERS的先前方法的改进。在BOT-IOT数据集上还评估了在UNSW-NB15上训练的模型的性能,从而导致了竞争性能。

In order to gain access to networks, different types of intrusion attacks have been designed, and the attackers are working on improving them. Computer networks have become increasingly important in daily life due to the increasing reliance on them. In light of this, it is quite evident that algorithms with high detection accuracy and reliability are needed for various types of attacks. The purpose of this paper is to develop an intrusion detection system that is based on deep reinforcement learning. Based on the Markov decision process, the proposed system can generate informative representations suitable for classification tasks based on vast data. Reinforcement learning is considered from two different perspectives, deep Q learning, and double deep Q learning. Different experiments have demonstrated that the proposed systems have an accuracy of $99.17\%$ over the UNSW-NB15 dataset in both approaches, an improvement over previous methods based on contrastive learning and LSTM-Autoencoders. The performance of the model trained on UNSW-NB15 has also been evaluated on BoT-IoT datasets, resulting in competitive performance.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源