Abstract:Network intrusion anomaly detection technique has been widely employed in computer network environments as a highly effective security prevention method. As network technology and network applications have advanced at a rapid pace, so too has network data traffic, resulting in an increase in virus and attack kinds. In the face of large-scale traffic and characteristic information, traditional intrusion detection will have problems such as low detection accuracy, high false negatives, and reliance on dimensionality reduction algorithms. Therefore, it is particularly important to establish a fast and efficient network intrusion anomaly detection method to deal with the current complex network environment. This work designs a computer network intrusion detection model with a recurrent neural network in order to explore a new intrusion detection method. The main purpose of this article include the following: (1) design a network security emergency response system architecture with the recurrent neural network model. This system consists of a management center module, a knowledge database module, a data acquisition module, a risk detection tool module, a risk analysis and processing module, a data protection module, and a remote connection auxiliary module. The modules cooperate with each other to complete system functions. (2) Aiming at the risk analysis and processing module, a network intrusion detection model combining bidirectional long short-term memory (BiLSTM) and deep neural network (DNN) is designed. In view of the lack of consideration of the before-and-after relevance of intrusion data features and the multifeature problem in existing models, the use of BiLSTM to extract the relevance between features and the use of DNN to extract deeper features are proposed. Aiming at the problem that the model lacks consideration of the importance of features, it is proposed to embed an attention mechanism into the network to increase consideration for the importance of features. (3) Massive experiments have verified the reliability and effectiveness of the method proposed in this work.

A Study on Anomaly Detection Method Based on Correlation Eigen Matrix and Neural Network

Anomaly Detection System Based on Principal Component Analysis and Support Vector Machine

Masquerade detection system based on correlation eigen matrix and support vector machine

CANet: Convolutional Attention-based Network for Multivariate Time Series Anomaly Detection

Learning Multi-Pattern Normalities in the Frequency Domain for Efficient Time Series Anomaly Detection

Anomaly-Based Intrusion Detection System using Supervised Learning Algorithm Artificial Neural Network and Ant Colony Optimization with Feature Selection

Optimal Classification-based Anomaly Detection with Neural Networks: Theory and Practice

Network Anomaly Detection Algorithm Based on Lindeberg-Feller Central Limit Theorem

An Ensemble Approach for Detecting Anomalous User Behaviors

Hybrid Weighted K-Means Clustering and Artificial Neural Network for an Anomaly-Based Network Intrusion Detection System

Robust Regression for Anomaly Detection.

Network-based Anomaly Intrusion Detection with Numeric-and-nominal Mixed Data

An Effective Method for Computer Network Anomaly Detection

Robust Anomaly Detection for Multivariate Time Series Through Stochastic Recurrent Neural Network

A Survey on Anomaly Detection for Technical Systems using LSTM Networks

Computer Network Intrusion Anomaly Detection with Recurrent Neural Network

A Novel Power System Anomaly Data Identification Method Based on Neural Network and Affine Propagation.

A Rough Set Theory Based Method for Anomaly Intrusion Detection in Computer Network Systems

Anomaly detection model of user behavior based on principal component analysis

Malicious Network Traffic Detection Based on Deep Neural Networks and Association Analysis

Anomaly Detection on Financial Time Series by Principal Component Analysis and Neural Networks