基于改进深度卷积生成对抗网络的入侵检测方法研究

针对入侵检测系统因采用的网络攻击样本具有不平衡性而导致检测结果出现较大偏差的问题,文章提出一种将改进后的深度卷积生成对抗网络(DCGAN)与深度神经网络(DNN)相结合的入侵检测模型(DCGAN-DNN),深度卷积生成对抗网络能够通过学习已知攻击样本数据的内在特征分布生成新的攻击样本,并对深度卷积生成对抗网络中生成网络所用的线性整流(ReLU)激活函数作出改进,改善了均值偏移和神经元坏死的问题,提升了训练稳定性。使用CIC-IDS-2017数据集作为实验样本对模型进行评估,与传统的过采样方法相比DCGAN-DNN入侵检测模型对于未知攻击和少数攻击类型具有较高检测率。

Research on Intrusion Detection Method Based on Improved Deep Convolutional Generative Adversarial Network

An intrusion detection model (DCGAN-DNN) that combines an improved deep convolutional generative adversarial network (DCGAN) with a deep neural network (DNN) is proposed in the paper to address the problem of large bias in the detection results of intrusion detection systems due to the unbalanced nature of the network attack samples used. The intrinsic feature distribution of the known attack sample data is learned by the deep convolutional generative adversarial network to generate new attack samples, The linear rectification (ReLU) activation function used for generating networks in deep convolutional generative adversarial networks is improved to ameliorate the problems of mean shift and neuron necrosis and to enhance training stability. The CIC-IDS-2017 dataset is used as an experimental sample to evaluate the model, the DCGAN-DNN intrusion detection model is used to compare with traditional oversampling methods and is found to have a high detection rate for unknown attacks and a few attack types.