<p>Intrusion detection, as an active network security protection technology, has become an important part of the network security field. However, with the increasing complexity and diversification of network attacks, it is a challenging topic to design an intrusion detection scheme with high detection accuracy and strong ability to detect unknown attack types. Therefore, this paper proposes a graph convolutional neural network (GCN)-based multi-classification network intrusion detection algorithm, named as GCNID algorithm. Firstly, in order to better represent the similarity and correlation between detection data, the preprocessed detection data is transformed into an undirected graph structure by using the <i>k</i> nearest neighbor method. Subsequently, a multi-classification network based on three-layer GCN is constructed to enhance the detection performance. Specifically, information from adjacent nodes is integrated into the central node through the graph convolutional layers of GCN, so that effective identification features can be extracted from the intrusion data, and the intrusion data can be identified and classified according to the obtained features. Simulation results indicate that the proposed algorithm not only enhances the precision of detection but also effectively categorizes unknown attack varieties.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Multi-classification algorithm based on graph convolutional neural network for intrusion detection

  • Ruiyan Du,
  • Minghui Huang,
  • Fulai Liu

摘要

Intrusion detection, as an active network security protection technology, has become an important part of the network security field. However, with the increasing complexity and diversification of network attacks, it is a challenging topic to design an intrusion detection scheme with high detection accuracy and strong ability to detect unknown attack types. Therefore, this paper proposes a graph convolutional neural network (GCN)-based multi-classification network intrusion detection algorithm, named as GCNID algorithm. Firstly, in order to better represent the similarity and correlation between detection data, the preprocessed detection data is transformed into an undirected graph structure by using the k nearest neighbor method. Subsequently, a multi-classification network based on three-layer GCN is constructed to enhance the detection performance. Specifically, information from adjacent nodes is integrated into the central node through the graph convolutional layers of GCN, so that effective identification features can be extracted from the intrusion data, and the intrusion data can be identified and classified according to the obtained features. Simulation results indicate that the proposed algorithm not only enhances the precision of detection but also effectively categorizes unknown attack varieties.