基于1DCNN和BiSRU的工控网络入侵检测方法

AN APPROACH TO INTRUSION DETECTION FOR INDUSTRIAL CONTROL SYSTEM NETWORK BASED ON 1DCNN AND BiSRU

  • 摘要: 针对工业控制系统(Industrial Control System,ICS)网络入侵检测中样本类不平衡和特征提取不充分的问题,提出基于一维卷积神经网络(One-dimensional Convolutional Neural Network,1DCNN)和双向简单循环单元(Bidirectional Simple Recurrent Units,BiSRU)的ICS网络入侵检测方法。该方法采用合成少数类过采样技术优化训练样本,使用1DCNN提取样本空间特征,利用BiSRU二次提取上下文时序语义信息,通过全连接层进行样本多分类。仿真结果表明,该方法的综合性能远优于其他算法,能够有效识别ICS网络入侵行为。

     

    Abstract: An intrusion detection method is proposed based on one-dimensional convolutional neural network (1DCNN) and bidirectional simple recurrent unit (BiSRU) to solve the problems of sample class imbalance and insufficient feature extraction in intrusion detection of industrial control system (ICS) network. The training samples were optimized by the synthetic minority oversampling technique in this method. The 1DCNN and BiSRU were used to extract the sample space features and contextual timing semantic information respectively. And this method performed sample multi-classification by fully connected layers. Simulation results show that the comprehensive performance of this method is much better than other algorithms, and it can effectively identify intrusion behavior of the ICS network.

     

/

返回文章
返回