计算机工程与科学2024,Vol.46Issue(12) :2158-2170.DOI:10.3969/j.issn.1007-130X.2024.12.008

基于改进萤火虫算法和长短期记忆网络的恶意行为检测方法

Malicious behavior detection method based on iFA and improved LSTM network

沈凡凡 汤星译 张军 徐超 陈勇 何炎祥
计算机工程与科学2024,Vol.46Issue(12) :2158-2170.DOI:10.3969/j.issn.1007-130X.2024.12.008

基于改进萤火虫算法和长短期记忆网络的恶意行为检测方法

Malicious behavior detection method based on iFA and improved LSTM network

沈凡凡 1汤星译 1张军 2徐超 1陈勇 1何炎祥3
扫码查看

作者信息

  • 1. 南京审计大学计算机学院(智能审计学院),江苏南京 211815
  • 2. 东华理工大学软件学院,江西南昌 330013
  • 3. 武汉大学计算机学院,湖北武汉 430072
  • 折叠

摘要

近年来,数据平台与系统的规模飞速扩张,性能快速提升,安全性能也随之越发重要.现有的基于深度学习的恶意行为检测方案缺少与模型契合的优化算法,导致模型缺乏自优化能力.提出了一种基于改进萤火虫算法与改进长短期记忆网络的恶意行为检测方法iFA-LSTM,该方法可以有效地进行恶意行为的二分类检测.通过UNSW-NB15数据集来验证所提出的方法,方法在单攻击二分类实验中的平均识别准确率达到了 99.56%,且在混合攻击二分类实验中平均识别准确率也达到了 98.79%,同时也充分证明了 iFA的有效性.所提出的方法可以快速有效地进行恶意行为检测,非常有希望应用于恶意行为的安全监控和识别.

Abstract

In recent years,the scale and performance of data platforms and systems have expanded rapidly,making security performance increasingly critical.Existing malicious behavior detection schemes based on deep learning lack optimization algorithms tailored to the models,resulting in a lack of self-optimization capabilities.This paper proposes a malicious behavior detection method called iFA-LSTM(improved firefly algorithm and improved long short-term memory network),which leverages an improved firefly algorithm and an improved LSTM network to effectively perform binary classification detection of malicious behaviors.The proposed method is validated using the UNSW-NB15 dataset.In single-attack binary classification experiments,the method achieves an average recognition accuracy of 99.56%,while in mixed-attack binary classification experiments,the average recognition accuracy reaches 98.79%.Additionally,the iFA fully demonstrates its effectiveness.The proposed method can detect malicious behaviors quickly and effectively,holding great promise for application in security mo-nitoring and recognition of malicious behaviors.

关键词

平台与系统安全/恶意行为检测/神经网络/算法优化/二分类

Key words

platform and system security/malicious behavior detection/neural network/algorithm optimization/binary classification

引用本文复制引用

出版年

2024
计算机工程与科学
国防科学技术大学计算机学院

计算机工程与科学

CSTPCD北大核心
影响因子:0.787
ISSN:1007-130X
段落导航相关论文