HTTP malicious traffic detection method based on hybrid structure deep neural network

In response to the HTTP malicious traffic detection problem,a preprocessing method based on cutting mechanism and statistical association was proposed to perform statistical information correlation as well as normalization processing of traffic.Then,a hybrid neural network was proposed based on the...

Full description

Saved in:
Bibliographic Details
Main Authors: Jia LI, Xiaochun YUN, Shuhao LI, Yongzheng ZHANG, Jiang XIE, Fang FANG
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2019-01-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019019/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841539412234600448
author Jia LI
Xiaochun YUN
Shuhao LI
Yongzheng ZHANG
Jiang XIE
Fang FANG
author_facet Jia LI
Xiaochun YUN
Shuhao LI
Yongzheng ZHANG
Jiang XIE
Fang FANG
author_sort Jia LI
collection DOAJ
description In response to the HTTP malicious traffic detection problem,a preprocessing method based on cutting mechanism and statistical association was proposed to perform statistical information correlation as well as normalization processing of traffic.Then,a hybrid neural network was proposed based on the combination of raw data and empirical feature engineering.It combined convolutional neural network (CNN) and multilayer perceptron (MLP) to process text and statistical information.The effect of the model was significantly improved compared with traditional machine learning algorithms (e.g.,SVM).The F<sub>1</sub>value reached 99.38% and had a lower time complexity.At the same time,a data set consisting of more than 450 000 malicious traffic and more than 20 million non-malicious traffic was created.In addition,prototype system based on model was designed with detection precision of 98.1%~99.99% and recall rate of 97.2%~99.5%.The application is excellent in real network environment.
format Article
id doaj-art-303c21b78cd345c8810a55f5491169e2
institution Kabale University
issn 1000-436X
language zho
publishDate 2019-01-01
publisher Editorial Department of Journal on Communications
record_format Article
series Tongxin xuebao
spelling doaj-art-303c21b78cd345c8810a55f5491169e22025-01-14T07:16:04ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2019-01-0140243359724258HTTP malicious traffic detection method based on hybrid structure deep neural networkJia LIXiaochun YUNShuhao LIYongzheng ZHANGJiang XIEFang FANGIn response to the HTTP malicious traffic detection problem,a preprocessing method based on cutting mechanism and statistical association was proposed to perform statistical information correlation as well as normalization processing of traffic.Then,a hybrid neural network was proposed based on the combination of raw data and empirical feature engineering.It combined convolutional neural network (CNN) and multilayer perceptron (MLP) to process text and statistical information.The effect of the model was significantly improved compared with traditional machine learning algorithms (e.g.,SVM).The F<sub>1</sub>value reached 99.38% and had a lower time complexity.At the same time,a data set consisting of more than 450 000 malicious traffic and more than 20 million non-malicious traffic was created.In addition,prototype system based on model was designed with detection precision of 98.1%~99.99% and recall rate of 97.2%~99.5%.The application is excellent in real network environment.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019019/abnormal detectionmalicious traffic dataconvolutional neural networkmultilayer perceptron
spellingShingle Jia LI
Xiaochun YUN
Shuhao LI
Yongzheng ZHANG
Jiang XIE
Fang FANG
HTTP malicious traffic detection method based on hybrid structure deep neural network
Tongxin xuebao
abnormal detection
malicious traffic data
convolutional neural network
multilayer perceptron
title HTTP malicious traffic detection method based on hybrid structure deep neural network
title_full HTTP malicious traffic detection method based on hybrid structure deep neural network
title_fullStr HTTP malicious traffic detection method based on hybrid structure deep neural network
title_full_unstemmed HTTP malicious traffic detection method based on hybrid structure deep neural network
title_short HTTP malicious traffic detection method based on hybrid structure deep neural network
title_sort http malicious traffic detection method based on hybrid structure deep neural network
topic abnormal detection
malicious traffic data
convolutional neural network
multilayer perceptron
url http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2019019/
work_keys_str_mv AT jiali httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork
AT xiaochunyun httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork
AT shuhaoli httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork
AT yongzhengzhang httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork
AT jiangxie httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork
AT fangfang httpmalicioustrafficdetectionmethodbasedonhybridstructuredeepneuralnetwork