基于深度学习的实时ddos攻击检测-信息通信学术期刊网.pdfVIP

研究与开发 基于深度学习的实时 DDoS 攻击检测 1 1 2 2 1 1 李传煌 ，孙正君 ，袁小雍 ，李晓林 ，龚梁 ，王伟明 （1. 浙江工商大学信息与电子工程学院，浙江 杭州310018； 2. 美国佛罗里达大学大规模智能系统实验室，美国 佛罗里达州 盖恩斯维尔32611 ） 摘 要：分布式拒绝服务（DDoS ）攻击是一种分布式、协作式的大规模网络攻击方式，提出了一种基于深度 学习的 DDoS 攻击检测方法，该方法包含特征处理和模型检测两个阶段：特征处理阶段对输入的数据分组进 行特征提取、格式转换和维度重构；模型检测阶段将处理后的特征输入深度学习网络模型进行检测，判断输 入的数据分组是否为DDoS 攻击分组。通过ISCX2012 数据集训练模型，并通过实时的DDoS 攻击对模型进行 验证。结果表明，基于深度学习的 DDoS 攻击检测方法具有高检测精度、对软硬件设备依赖小、深度学习网 络模型易于更新等优点。 关键词：分布式拒绝服务；拒绝服务；深度学习 中图分类号：TP393 文献标识码：A doi: 10.11959/j.issn.1000−0801.2017191 Real-time DDoS attack detection based on deep learning 1 1 2 2 1 1 LI Chuanhuang , SUN Zhengjun , YUAN Xiaoyong , LI Xiaolin , GONG Liang ,WANG Weiming 1. Institute of Communication and Engineering, Zhejiang Gongshang University, Hangzhou 310018, China 2. Li Lab, University of Florida, Gainesville, Florida 32611, USA Abstract: Distributed denial of service (DDoS) is a special form of denial of service (DoS) attack based on denial of service(DoS). It is a distributed, collaborative large-scale network attack. A DDoS detection method based on deep learning was presented. The method included two stages: feature processing and model detection: feature extraction, format conversion and dimension reconstruction of the input data packet was performed in feature processing stage; in the model detection stage, the processed features were input to the depth learning network model to detect whether the input data packets was DDoS attack packet. The model was trained by the ISCX2012 dataset, and the model was validated by real-time