HTTP malicious traffic detection method based on hybrid structure deep neural network
In response to the HTTP malicious traffic detection problem,a preprocessing method based on cutting mechanism and statistical association was proposed to perform statistical information correlation as well as normalization processing of traffic.Then,a hybrid neural network was proposed based on the...
Saved in:
Main Authors: | , , , , , |
---|---|
Format: | Article |
Language: | zho |
Published: |
Editorial Department of Journal on Communications
2019-01-01
|
Series: | Tongxin xuebao |
Subjects: | |
Online Access: | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019019/ |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1841539412234600448 |
---|---|
author | Jia LI Xiaochun YUN Shuhao LI Yongzheng ZHANG Jiang XIE Fang FANG |
author_facet | Jia LI Xiaochun YUN Shuhao LI Yongzheng ZHANG Jiang XIE Fang FANG |
author_sort | Jia LI |
collection | DOAJ |
description | In response to the HTTP malicious traffic detection problem,a preprocessing method based on cutting mechanism and statistical association was proposed to perform statistical information correlation as well as normalization processing of traffic.Then,a hybrid neural network was proposed based on the combination of raw data and empirical feature engineering.It combined convolutional neural network (CNN) and multilayer perceptron (MLP) to process text and statistical information.The effect of the model was significantly improved compared with traditional machine learning algorithms (e.g.,SVM).The F<sub>1</sub>value reached 99.38% and had a lower time complexity.At the same time,a data set consisting of more than 450 000 malicious traffic and more than 20 million non-malicious traffic was created.In addition,prototype system based on model was designed with detection precision of 98.1%~99.99% and recall rate of 97.2%~99.5%.The application is excellent in real network environment. |
format | Article |
id | doaj-art-303c21b78cd345c8810a55f5491169e2 |
institution | Kabale University |
issn | 1000-436X |
language | zho |
publishDate | 2019-01-01 |
publisher | Editorial Department of Journal on Communications |
record_format | Article |
series | Tongxin xuebao |
spelling | doaj-art-303c21b78cd345c8810a55f5491169e22025-01-14T07:16:04ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2019-01-0140243359724258HTTP malicious traffic detection method based on hybrid structure deep neural networkJia LIXiaochun YUNShuhao LIYongzheng ZHANGJiang XIEFang FANGIn response to the HTTP malicious traffic detection problem,a preprocessing method based on cutting mechanism and statistical association was proposed to perform statistical information correlation as well as normalization processing of traffic.Then,a hybrid neural network was proposed based on the combination of raw data and empirical feature engineering.It combined convolutional neural network (CNN) and multilayer perceptron (MLP) to process text and statistical information.The effect of the model was significantly improved compared with traditional machine learning algorithms (e.g.,SVM).The F<sub>1</sub>value reached 99.38% and had a lower time complexity.At the same time,a data set consisting of more than 450 000 malicious traffic and more than 20 million non-malicious traffic was created.In addition,prototype system based on model was designed with detection precision of 98.1%~99.99% and recall rate of 97.2%~99.5%.The application is excellent in real network environment.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019019/abnormal detectionmalicious traffic dataconvolutional neural networkmultilayer perceptron |
spellingShingle | Jia LI Xiaochun YUN Shuhao LI Yongzheng ZHANG Jiang XIE Fang FANG HTTP malicious traffic detection method based on hybrid structure deep neural network Tongxin xuebao abnormal detection malicious traffic data convolutional neural network multilayer perceptron |
title | HTTP malicious traffic detection method based on hybrid structure deep neural network |
title_full | HTTP malicious traffic detection method based on hybrid structure deep neural network |
title_fullStr | HTTP malicious traffic detection method based on hybrid structure deep neural network |
title_full_unstemmed | HTTP malicious traffic detection method based on hybrid structure deep neural network |
title_short | HTTP malicious traffic detection method based on hybrid structure deep neural network |
title_sort | http malicious traffic detection method based on hybrid structure deep neural network |
topic | abnormal detection malicious traffic data convolutional neural network multilayer perceptron |
url | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019019/ |
work_keys_str_mv | AT jiali httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork AT xiaochunyun httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork AT shuhaoli httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork AT yongzhengzhang httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork AT jiangxie httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork AT fangfang httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork |