针对基于深度学习的入侵检测系统存在局部特征提取效果不佳,提取维度单一,预测精度有待提高和模型计算开销过高等问题,提出了一种基于膨胀卷积网络(Dilated Convolution Network,DCN)与双向长短记忆网络(Bidirectional Long Short Memory Network,BiLSTM)的入侵检测模型。首先使用改进的三层膨胀卷积神经网络(Dilated Convolution Network,DCN)结构进行局部特征提取,解决了局部特征提取效果不佳、提取维度单一的问题;其次使用将膨胀卷积与BiLSTM相结合的办法解决预测精度有待提高的问题;最后通过在模型中引入分组卷积技术使模型轻量化,解决了计算开销过高的问题。在公开数据集CICIDS2017 上进行了实验,经过对比传统模型以及现有的入侵检测方法表明,所提模型拥有较好的性能。模型预测准确率、召回率、F1 值较高,证明了其有效性和可行性。
A Network Intrusion Detection Model Based on Dilated Convolution Network and BiLSTM
Aiming at the problems of the intrusion detection system based on deep learning,such as poor local feature extraction effect,single extraction dimension,prediction accuracy to be improved and high cost of model calculation,an intrusion detection model based on Dilated Convolutional Network(DCN)and Bidirectional Long Short Memory Network(BiLSTM)is proposed.Firstly,an improved three-layer DCN structure was used for local feature extraction,which solved the problem of poor local feature extraction performance and single extraction dimension.Secondly,the method combining expansion convolution with BiLSTM was used to solve the problem that the prediction accuracy needs to be improved.Finally,grouping convolution technology was introduced into the model to make the model lightweight,which solves the problem of high computational cost.The experiments were conducted on the public dataset CICIDS2017.After comparing traditional models with existing intrusion detection methods,the proposed model has excellent performance.The high prediction accuracy,recall rate,and F1 value of the proposed model demonstrate its effectiveness and feasibility.
network securityintrusion detectiondilated convolution networkbidirectional long short memory networkfeature extraction