Abstract:Attacks on network systems are becoming more and more common, the current state of increasingly sophisticated attack methods, the emergence of intrusion prevention technology is the inevitable result of the development of computer technology and network technology, and research on intrusion prevention has become a new focus of network security technology research in recent years. In order to ensure the security of computer network confidential information, the authors propose a semisupervised clustering intrusion detection algorithm. An overview of machine learning, followed by an explanation of the theory of cluster analysis, simulation experiments were carried out using the K -means algorithm and the semisupervised clustering algorithm proposed by the author, for 10,000 records, the K -means clustering algorithm and the semisupervised clustering algorithm described in this paper are used, respectively, and intrusion detection data tests were performed. At the same time, different K values were selected, three datasets were selected from "kddcup.newtestdata_10_percent_corrected," the test data were tested separately, and their average value was taken as the test result. From the simulation results, the detection rate of the semisupervised clustering algorithm is higher than that of the K -means clustering algorithm, and the false alarm rate and K -means algorithms have also been improved. Therefore, the author's semisupervised algorithm enhances the stability of the system, and the performance of the K -means algorithm is improved to a certain extent. When the value of K gradually increases, the false alarm rate also increases; however, when K is 20, the detection rate is maximized, from this, it can be known that when K is 20, its detection rate reaches 91.76%, and the false alarm rate is 8.54%. The detection rate of the author's algorithm is significantly higher than the other two algorithms, the false positive rate is slightly higher than K -means, and the false positive rate is lower than that of the other algorithm, proving the superior performance of our algorithm.

Research on Industrial Control Protocol Clustering Algorithm Based on Convolutional Self-Encoder and Improved K-means

Automatic Protocol Reverse Engineering for Industrial Control Systems with Dynamic Taint Analysis

Industrial control network security situation awareness based on improved C-SVC

Compound Fuzzy Clustering Anomaly Detection Based on Production Process Coupling

An Anomaly Detection and Scenario Classification Scheme Based on Fuzzy C-means Clustering

Exploring the power of convolutional neural networks for encrypted industrial protocols recognition

An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model

Classification and Recognition of Unknown Network Protocol Characteristics.

MHCF-CECSO: A Novel High-Performance Clustering Framework for Industrial IoT

An Unknown Protocol Classification Method Based on Clustering Algorithm and Hyperparametric Optimization

Intrusion Detection Algorithm of Power Grid Industrial Control System Based on CNN

Features Extraction Based On Deep Analysis Of Network Packets In Industrial Control Systems

Industrial Control Malicious Traffic Anomaly Detection System Based on Deep Autoencoder

Sub-messages extraction for industrial control protocol reverse engineering

An Improved K -Means Clustering Intrusion Detection Algorithm for Wireless Networks Based on Federated Learning

A Real-time Intrusion Detection Method for Industrial Control Network Based on Heterogeneous Feature Extractor

Reverse Engineering Industrial Protocols Driven by Control Fields

PREIUD: An Industrial Control Protocols Reverse Engineering Tool Based on Unsupervised Learning and Deep Neural Network Methods

Computer Network Confidential Information Security Based on Big Data Clustering Algorithm

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Design and Implementation of Industrial Internet Application Layer Protocol Integrating AES and RSA Encryption Algorithm