Abstract:To better understand the behavior of attackers and describe the network state, we construct an LSTM-DT model for network security situation awareness, which provides risk assessment indicators and quantitative methods. This paper introduces the concept of attack probability, making prediction results more consistent with the actual network situation. The model is focused on the problem of the time sequence of network security situation assessment by using the decision tree algorithm (DT) and long short-term memory(LSTM) network. The biggest innovation of this paper is to change the description of the network situation in the original dataset. The original label only has attack and normal. We put forward a new idea which regards attack as a possibility, obtaining the probability of each attack, and describing the network situation by combining the occurrence probability and attack impact. Firstly, we determine the network risk assessment indicators through the dataset feature distribution, and we give the network risk assessment index a corresponding weight based on the analytic hierarchy process (AHP). Then, the stack sparse auto-encoder (SSAE) is used to learn the characteristics of the original dataset. The attack probability can be predicted by the processed dataset by using the LSTM network. At the same time, the DT algorithm is applied to identify attack types. Finally, we draw the corresponding curve according to the network security situation value at each time. Experiments show that the accuracy of the network situation awareness method proposed in this paper can reach 95%, and the accuracy of attack recognition can reach 87%. Compared with the former research results, the effect is better in describing complex network environment problems.

A Network Security Situation Prediction Method Based on SSA-GResNeSt

An Intrusion Detection System Using a Deep Neural Network with Gated Recurrent Units.

Network security situation prediction method based on strengthened LSTM neural network

Network Security Situation Prediction Model Based on EMD and ELPSO Optimized BiGRU Neural Network

Prediction of network security situation awareness based on an improved model combined with neural network

Research on Network Security Situation Awareness Based on the LSTM-DT Model

Network Security Situation Prediction Based on Optimized Clock-Cycle Recurrent Neural Network for Sensor-Enabled Networks

Network Intrusion Detection Model Based on CNN and GRU

STEP: Spatial-Temporal Network Security Event Prediction

A Network Security Situation Prediction Method through the Use of Improved TCN and BiDLSTM

Research on gray correlation analysis and situation prediction of network information security

SPP-CNN: An Efficient Framework for Network Robustness Prediction

A Model of Network Security Situation Assessment Based on BPNN Optimized by SAA-SSA

ISSA-ELM: A Network Security Situation Prediction Model

Construction and Analysis of QPSO-LSTM Model in Network Security Situation Prediction

A network security situational awareness model based on multi-source heterogeneous sensors

N-STGAT：Spatio-Temporal Graph Neural Network Based Network Intrusion Detection for Near-earth Remote Sensing

A novel IoT network intrusion detection approach based on Adaptive Particle Swarm Optimization Convolutional Neural Network

NiNSRAPM: an Ensemble Learning Based Non-intrusive Network Security Risk Assessment Prediction Model

Strengthening Network Security: Deep Learning Models for Intrusion Detection with Optimized Feature Subset and Effective Imbalance Handling

A revolutionary approach to use convolutional spiking neural networks for robust intrusion detection