Abstract:The rapid development of Internet technology has brought great convenience to our production life, and the ensuing security problems have become increasingly prominent. These problems threaten users' privacy and pose significant security risks to the normal conduct of many aspects of society, such as politics, economy, culture, and people's livelihood. The growth of the information transmission rate expands the scope of attacks and provides a more attack environment for intruders. Abnormal detection is an effective security protection technology that can monitor network transmission in real-time, effectively sense external attacks, and provide response decisions for relevant managers. The development of machine learning has also led to the development of abnormal traffic detection technology. The goal has been to use powerful and fast learning algorithms to deal with changing threats and respond in real-time. Most of the current abnormal detection research is based on simulation, using public and well-known datasets. On the one hand, the dataset contains high-dimensional massive data, which traditional machine learning methods cannot be processed. On the other hand, the labeled data scale is far behind the application requirements, and the dataset's labels are all manually labeled, so the labeling cost is exceptionally high. This paper proposes a semi-supervised Double Deep Q-Network (SSDDQN)-based optimization method for network abnormal traffic detection, mainly based on Double Deep Q-Network (DDQN), a representative of Deep Reinforcement Learning algorithm. In SSDDQN, the current network first adopts the autoencoder to reconstruct the traffic features and then uses a deep neural network as a classifier. The target network first uses the unsupervised learning algorithm K-Means clustering and then uses deep neural network prediction. The experiment uses NSL-KDD and AWID datasets for training and testing and -erforms a comprehensive comparison with existing machine learning models. The experimental results show that SSDDQN has certain advantages in time complexity and achieved good results in various evaluation metrics.

A Novel Semi-Supervised Adaboost Technique Based On Improved Tri-Training

Semi-supervised tri-Adaboost algorithm for network intrusion detection

The Detection of Network Intrusion Based on Improved Adaboost Algorithm

A network anomaly detection algorithm based on semi-supervised learning and adaptive multiclass balancing

Network Abnormal Traffic Detection Model Based on Semi-Supervised Deep Reinforcement Learning

A semi-supervised network traffic classification method based on incremental learning

Semi-supervised Machine Learning Framework for Network Intrusion Detection

A Novel Co-training Ob ject Tracking Algorithm Based on Online Semi-supervised Boosting

Network Intrusion Detection Based on Active Semi-supervised Learning

ON EXPERIMENTING ADABOOST ALGORITHM IN NETWORK INTRUSION DETECTION

A Tri-training Based Transfer Learning Algorithm

Semi-Supervised Ensemble Classification Method Based On Near Neighbor And Its Application

Semi-supervised multi-class Adaboost by exploiting unlabeled data

AdaBoost Algorithm in Trustworthy Network for Anomaly Intrusion Detection

Tri-net for Semi-Supervised Deep Learning.

Research of Semi-supervised Classification Algorithm Based on Tri-Training

A Novel Semi-Supervised Learning Approach for Network Intrusion Detection on Cloud-Based Robotic System.

Tri-Training Algorithm Based Nuclear Power Systems Semi-Supervised Fault Diagnosis under Multiple Restricted Data Conditions

Semi-supervised Network Traffic Classification Method Based on Support Vector Machine

Tri-training Algorithm Based on Cross Entropy and K-nearest Neighbors for Network Intrusion Detection.

Improved multi-class semi-supervised learning with boosting method