天地一体化智能网络异常流量检测

A HYBRID DETECTION METHOD OF ABNORMAL TRAFFIC IN THE INTEGRATED SPACE-TERRESTRIAL NETWORK

  • 摘要: 天地一体化网络流量存在自相似性和重尾分布等特征,导致网络中的异常流量难以准确识别。针对这种情况,提出一种Entropy优化GA_LSTM的天地一体化智能网络异常流量混合检测方法。算法通过信息熵总结特定的流量特征分布来初步检测异常流量,缩小异常流量的检测范围;利用遗传算法优化LSTM对熵检测后的网络流量进行二次判断,以提高网络异常流量检测的精确度。仿真结果表明,该混合检测算法相比于传统的信息熵和经典LSTM检测算法具有更好的收敛速度和准确性。

     

    Abstract: The traffic of the integrated space-terrestrial network has characteristics such as self-similarity and heavy-tailed distribution, which makes it difficult to efficiently distinguish abnormal traffic in the network. In view of this, we propose a hybrid detection method of abnormal traffic in the integrated space-terrestrial network based on entropy-optimized GA_LSTM. The method utilized information entropy to generalize the distribution of traffic characteristics to initially detect abnormal traffic, which could quickly narrow the scope of abnormal traffic detection. The genetic algorithm was used to optimize the LSTM and make a secondary judgment on the network traffic after entropy detection, which was used to improve the accuracy of abnormal traffic detection in the network. The simulation results show that the proposed traffic hybrid detection has better convergence speed and accuracy compared with traditional information entropy and classical LSTM detection algorithms.

     

/

返回文章
返回