In order to effectively identify novel attacks in industrial network environments that are combined by multiple pieces of anomalous data,we propose a deep reinforcement learning-based fusion model DQN-LSTM based on deep reinforcement learning.The model combines spatial and temporal features of traffic data to unfolding anomaly detection .Experiments are conducted on the publicly available industrial control network natural gas plant dataset,and the model in this paper compares favorably with SVM,CNN,and LSTM in terms of accuracy and F1 value.Compared with SVM,CNN, LSTM,DQN and other methods,the model in this paper has better comprehensive performance.
关键词
工业控制系统/流量异常检测/深度强化学习/DQN/LSTM
Key words
industrial control system/flow anomaly detection/deep reinforcement learning/DQN/LSTM
维普
万方数据