通过整合局部异常因子和卷积神经网络的局部异常因子和卷积神经网络的高度准确的基于异常的入侵检测
Rahimullah Rabih1, Hamed Vahdat-Nejad2, Wathiq Mansoor3
1Faculty of Electrical and Computer Engineering, University of Birjand, Birjand, Iran.
Scientific reports
|July 2, 2025
概括
本研究引入了一种新的入侵检测系统 (IDS) 方法,该方法结合了局部异常因子 (LOF) 算法和卷积神经网络 (CNN). 这种新的方法显著提高了识别网络异常和恶意活动的准确性.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 机器学习 机器学习
背景情况:
- 侵入检测系统 (IDS) 对于网络安全至关重要,但在准确区分恶意活动方面面临挑战.
- 基于异常的IDS需要增强的方法来可靠地检测偏离正常网络行为的偏差.
研究的目的:
- 开发一种新的方法来提高基于异常的入侵检测系统 (IDS) 的准确性.
- 将局部异常因素 (LOF) 算法与卷积神经网络 (CNN) 结合起来,以改进网络流量分类.
主要方法:
- 利用局部异常因素 (LOF) 算法来评估局部密度,并识别网络流量数据中的异常值.
- 采用卷积神经网络 (CNN) 模型将网络流量实例分为正常和异常行为.
- 通过卷积层利用CNN的特征提取能力来提高分类性能.
主要成果:
- 在使用CSE-CIC-IDS2018数据集检测和分类异常时获得了99.87%的准确性.
- 证明了LOF和CNN结合方法在准确识别恶意活动方面的有效性.
- 显示出异常检测虚假阳性结果的显著减少.
结论:
- LOF和CNN的整合为入侵检测提供了一个强大的,高度准确的解决方案.
- 这项研究为开发更有效的网络安全系统提供了宝贵的见解.
- 拟议的方法提高了入侵检测系统保护计算机网络的能力.
相关概念视频
Outliers and Influential Points
4.3K
An outlier is an observation of data that does not fit the rest of the data. It is sometimes called an extreme value. When you graph an outlier, it will appear not to fit the pattern of the graph. Some outliers are due to mistakes (for example, writing down 50 instead of 500), while others may indicate that something unusual is happening. Outliers are present far from the least squares line in the vertical direction. They have large "errors," where the "error" or residual is the...
4.3K
What Are Outliers?
4.2K
Outliers are observed data points that are far from the least squares line. They have unusual values and need to be examined carefully. Though an outlier may result from erroneous data, at other times, it may hold valuable information about the population under study and should be included in the data. Hence, it is crucial to examine what causes a data point to be an outlier.
The z score is used to find outliers or unusual values. It should be noted that any values beyond -2 and +2 are...
The z score is used to find outliers or unusual values. It should be noted that any values beyond -2 and +2 are...
4.2K
Quantifying and Rejecting Outliers: The Grubbs Test
2.1K
Sometimes, a data set can have a recorded numerical observation that greatly deviates from the rest of the data. Assuming that the data is normally distributed, a statistical method called the Grubbs test can be used to determine whether the observation is truly an outlier. To perform a two-tailed Grubbs test, first, calculate the absolute difference between the outlier and the mean. Then, calculate the ratio between this difference and the standard deviation of the sample. This...
2.1K
Difference from Background: Limit of Detection
7.1K
The limit of detection (LOD) is the smallest amount of analyte that can be distinguished from the background noise. The LOD value corresponds to the concentration at which the analyte signal is three times larger than the standard deviation of the blank signal. Below this value, the analyte signal cannot be differentiated from the background noise. It is calculated by dividing the calibration slope by 3 times the standard deviation of the blank signals.
The LOD indicates the presence or absence...
The LOD indicates the presence or absence...
7.1K
Steps in Outbreak Investigation
213
In the ever-evolving field of public health, statistical analysis serves as a cornerstone for understanding and managing disease outbreaks. By leveraging various statistical tools, health professionals can predict potential outbreaks, analyze ongoing situations, and devise effective responses to mitigate impact. For that to happen, there are a few possible stages of the analysis:
213
Detection of Gross Error: The Q Test
6.4K
When one or more data points appear far from the rest of the data, there is a need to determine whether they are outliers and whether they should be eliminated from the data set to ensure an accurate representation of the measured value. In many cases, outliers arise from gross errors (or human errors) and do not accurately reflect the underlying phenomenon. In some cases, however, these apparent outliers reflect true phenomenological differences. In these cases, we can use statistical methods...
6.4K


