ICPS入侵检测深度学习混合模型

Deep Learning Hybrid Model for ICPS Intrusion Detection

针对工业信息物理系统面临的网络安全问题,研究了一种基于深度学习混合模型的入侵检测方案。该方案将基于深度信念网络的无监督学习策略与基于支持向量机的有监督学习策略相结合,以实现工业信息物理系统入侵检测的半监督学习。对原始数据进行归一化处理并采用深度信念网络进行数据降维后,利用支持向量机进行入侵检测。使用MATLAB工具进行仿真,对以Modbus作为通信协议的监控与数据采集系统的真实数据进行测试。结果表明,与深度信念网络、支持向量机等算法模型相比,深度学习混合模型能显著提高异常检测的准确度。

Aiming at the network security problem faced by industrial cyber physical systems(ICPS),an intrusion detection scheme based on the deep learning hybrid model is studied.The scheme combines the unsupervised learning strategy based on the deep belief network with the supervised learning strategy based on the support vector machine to realize semi-supervised learning of industrial cyber physical system intrusion detection.After the original data are normalized and the dimensionality of the data is reduced by the deep belief network,the support vector machine is used for intrusion detection.The MATLAB tool is used for simulation to test the real data of the supervisory control and data acquisition system with Modbus as the communication protocol.The simulation results show that compared with the models of the deep belief network,support vector machine and other algorithms,the deep learning hybrid model can significantly improve the accuracy of anomaly detection.