Abstract:Network intrusion anomaly detection technique has been widely employed in computer network environments as a highly effective security prevention method. As network technology and network applications have advanced at a rapid pace, so too has network data traffic, resulting in an increase in virus and attack kinds. In the face of large-scale traffic and characteristic information, traditional intrusion detection will have problems such as low detection accuracy, high false negatives, and reliance on dimensionality reduction algorithms. Therefore, it is particularly important to establish a fast and efficient network intrusion anomaly detection method to deal with the current complex network environment. This work designs a computer network intrusion detection model with a recurrent neural network in order to explore a new intrusion detection method. The main purpose of this article include the following: (1) design a network security emergency response system architecture with the recurrent neural network model. This system consists of a management center module, a knowledge database module, a data acquisition module, a risk detection tool module, a risk analysis and processing module, a data protection module, and a remote connection auxiliary module. The modules cooperate with each other to complete system functions. (2) Aiming at the risk analysis and processing module, a network intrusion detection model combining bidirectional long short-term memory (BiLSTM) and deep neural network (DNN) is designed. In view of the lack of consideration of the before-and-after relevance of intrusion data features and the multifeature problem in existing models, the use of BiLSTM to extract the relevance between features and the use of DNN to extract deeper features are proposed. Aiming at the problem that the model lacks consideration of the importance of features, it is proposed to embed an attention mechanism into the network to increase consideration for the importance of features. (3) Massive experiments have verified the reliability and effectiveness of the method proposed in this work.

Network Security Event Prediction Based on Recurrent Neural Network

DeepOffense: a Recurrent Network Based Approach for Crime Prediction

Network security situation prediction method based on strengthened LSTM neural network

Real-Time Crash Risk Prediction using Long Short-Term Memory Recurrent Neural Network

STEP: Spatial-Temporal Network Security Event Prediction

Computer Network Intrusion Anomaly Detection with Recurrent Neural Network

Network Traffic Anomaly Detection Using Recurrent Neural Networks

Big Data-Driven Hierarchical Local Area Network Security Risk Event Prediction Algorithm

Joint prediction on security event and time interval through deep learning

A Network Security Situation Prediction Method through the Use of Improved TCN and BiDLSTM

Network Security Situation Prediction Based on Optimized Clock-Cycle Recurrent Neural Network for Sensor-Enabled Networks

A DDOS Attack Detection Method Based on Recurrent Neural Network

A Network Security Situation Prediction Method Based on SSA-GResNeSt

Network Traffic Prediction Based on LSTM and Transfer Learning

RBFNN-based Prediction of Networks Security Situation

The prediction of potential risk path in railway traffic events

Cyberspace Attack Detection Based On Advanced Initialized Recurrent Neural Network

Recurrent Neural Network Based Link Quality Prediction for Wireless Sensor Networks

Research on Network Security Situation Awareness Based on the LSTM-DT Model

Multi-scale Risk Assessment Model of Network Security Based on LSTM

Using a Recurrent Neural Network and Restricted Boltzmann Machines for Malicious Traffic Detection