保障网络空间安全的关键技术之一是网络流量异常检测,它通过分析和识别网络流量行为来检测恶意攻击。网络的快速发展导致了网络流量的爆发式增长,这严重影响了用户的信息安全。研究人员已经将入侵检测作为一种主动防御技术来应对这一挑战。然而,在处理大规模网络数据时,传统的机器学习方法很难捕获复杂的威胁和攻击模式。相比之下,深度学习方法具有从网络流量数据中自动提取特征、泛化能力强等优点。为了提高网络异常流量检测的能力,本文提出了一种基于深度残差收缩网络(DRSN)的网络流量异常检测方法,即“GSOOA-1DDRSN”。该方法使用改进的Osprey优化算法来选择网络流量中最相关和最重要的特征,减少特征的维度。为了更好地检测网络流量异常,设计了一维深度残差收缩网络(1DDRSN)作为分类器。使用NSL-KDD和UNSW-NB15数据集进行验证,并与其他方法进行比较。实验结果表明,GSOOA-1DDRSN提高了多分类精度,精度,召回,和F1得分大约2%和3%,分别,与两个数据集上的1DDRSN模型进行比较。此外,它将这些数据集上的时间计算成本降低了20%和30%。此外,与其他型号相比,GSOOA-1DDRSN提供卓越的分类精度,并有效减少特征数量。
One of the critical technologies to ensure cyberspace security is network traffic anomaly detection, which detects malicious attacks by analyzing and identifying network traffic behavior. The rapid development of the network has led to explosive growth in network traffic, which seriously impacts the user\'s information security. Researchers have delved into intrusion detection as an active defense technology to address this challenge. However, traditional machine learning methods struggle to capture complex threats and attack patterns when dealing with large-scale network data. In contrast, deep learning methods have the advantages of automatically extracting features from network traffic data and strong generalization capabilities. Aiming to enhance the ability of network anomaly traffic detection, this paper proposes a network traffic anomaly detection based on Deep Residual Shrinkage Network (DRSN), namely \"GSOOA-1DDRSN\". This method uses an improved Osprey optimization algorithm to select the most relevant and essential features in network traffic, reducing the features\' dimensionality. For better detection performance of network traffic anomalies, a one-dimensional deep residual shrinkage network (1DDRSN) is designed as a classifier. Validation is performed using the NSL-KDD and UNSW-NB15 datasets and compared with other methods. The experimental results show that GSOOA-1DDRSN has improved multi-classification accuracy, precision, recall, and F1 Score by approximately 2 % and 3 %, respectively, compared to the 1DDRSN model on two datasets. Additionally, it reduces the time computation costs by 20 % and 30 % on these datasets. Furthermore, compared to other models, GSOOA-1DDRSN offers superior classification accuracy and effectively reduces the number of features.