首页> 外国专利> Network Intrusion Detection Method using unsupervised deep learning algorithms and Computer Readable Recording Medium on which program therefor is recorded

Network Intrusion Detection Method using unsupervised deep learning algorithms and Computer Readable Recording Medium on which program therefor is recorded

机译:网络入侵检测方法,使用无监督的深度学习算法和计算机可读记录介质,记录其上的程序

摘要

The present invention relates to an unsupervised network intrusion detection method using a deep learning algorithm and a recording medium in which a program for executing the same is recorded. An unsupervised method for network intrusion detection using a deep learning algorithm according to an example of the present invention, and a recording medium on which a program for executing the same is recorded, pre-processes a data packet input from the outside in a one-hot encoding method a preprocessing step of generating an original vector expressed as a vector value; A compression and restoration step of compressing the original vector to a lower dimension using an autoencoder method and then restoring it to the original dimension to generate a restored vector expressed as a vector value; a loss value calculation step of calculating a loss value by calculating a difference value between the original vector and the restored vector; and a determination step of determining the data packet as abnormal data if the calculated loss value is greater than the threshold, and determining the data packet as normal data if the calculated loss value is less than the threshold. It is determined using an operating characteristic curve, ROC curve), and a point having a high true positive rate and a low false positive rate in the receiver operating characteristic curve may be selected as a threshold value.
机译:本发明涉及使用深度学习算法的无监督网络入侵检测方法和记录介质,其中记录用于执行相同的程序。使用根据本发明示例的深学习算法的网络入侵检测的无监督方法,以及记录用于执行该相同的程序的记录介质,预处理从外部输入的数据分组输入热编码方法生成表示为向量值的原始向量的预处理步骤;使用AutoEncoder方法将原始向量压缩到较低维度的压缩和恢复步骤,然后将其恢复到原始维度以生成表示为矢量值的恢复向量;通过计算原始矢量与恢复向量之间的差值计算损耗值的损耗值计算步骤;并且如果计算出的损耗值大于阈值,则确定数据包作为异常数据的确定步骤,并且如果计算出的损耗值小于阈值,则将数据分组确定为正常数据。可以选择使用操作特性曲线,ROC曲线),并且可以选择在接收器操作特性曲线中具有高真正阳性率和低假阳性率的点作为阈值。

著录项

  • 公开/公告号KR102279983B1

    专利类型

  • 公开/公告日2021-07-21

    原文格式PDF

  • 申请/专利权人 성균관대학교산학협력단;

    申请/专利号KR20180171484

  • 发明设计人 정윤경;김동민;

    申请日2018-12-28

  • 分类号G06N3/08;H04L29/06;

  • 国家 KR

  • 入库时间 2022-08-24 20:24:41

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号