Abnormal traffic detection utilizes various techniques to analyze and identify potential attacks within network traffic, playing a critical role in securing and monitoring network environments. To address the problem of low detection accuracy caused by the imbalanced distribution of normal traffic and unknown attack traffic in abnormal traffic detection, we propose a method called Synthetic Minority Over Sampling Technique and Wasserstein GAN-Based Convolutional Neural Network-Bidirectional Long Short-Term Memory (SWGCNN-BiLSTM). For imbalanced samples, SWG, which combines SMOTE and WGAN, is employed to balance the minority class samples. Subsequently, CNN is utilized to extract the spatial features of the samples, followed by BiLSTM to capture the temporal features. Our method is evaluated on the NSL-KDD dataset, achieving an accuracy of 98.67%. Experimental results demonstrate that our method enhances the accuracy of unknown attack traffic detection and outperforms detection methods based on traditional Machine Learning and Deep Learning.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

SWGCNN-BiLSTM: A Method for Detecting Unknown Attack Traffic Within Imbalanced Samples

  • Yiwen Fan,
  • Xuan Liu,
  • Rong Yan,
  • Haoran Yin,
  • Yaxin Zhang

摘要

Abnormal traffic detection utilizes various techniques to analyze and identify potential attacks within network traffic, playing a critical role in securing and monitoring network environments. To address the problem of low detection accuracy caused by the imbalanced distribution of normal traffic and unknown attack traffic in abnormal traffic detection, we propose a method called Synthetic Minority Over Sampling Technique and Wasserstein GAN-Based Convolutional Neural Network-Bidirectional Long Short-Term Memory (SWGCNN-BiLSTM). For imbalanced samples, SWG, which combines SMOTE and WGAN, is employed to balance the minority class samples. Subsequently, CNN is utilized to extract the spatial features of the samples, followed by BiLSTM to capture the temporal features. Our method is evaluated on the NSL-KDD dataset, achieving an accuracy of 98.67%. Experimental results demonstrate that our method enhances the accuracy of unknown attack traffic detection and outperforms detection methods based on traditional Machine Learning and Deep Learning.