基于平衡迭代规约层次聚类的无线传感器网络流量异常检测方案

A Novel WSN Traffic Anomaly Detection Scheme Based on BIRCH

针对现有网络流量异常检测方法不适用于实时无线传感器网络(WSN)检测环境、缺乏合理异常判决机制的问题,该文提出一种基于平衡迭代规约层次聚类(BIRCH)的WSN流量异常检测方案。该方案在扩充流量特征维度的基础上,利用BIRCH算法对流量特征进行聚类,通过设计动态簇阈值和邻居簇序号优化BIRCH聚类过程,以提高算法的聚类质量和性能鲁棒性。进一步,设计基于拐点的综合判决机制,结合预测、聚类结果对流量进行异常检测,保证方案的检测准确性。实验结果表明,所提方案在检测效果和检测性能稳定性上具有较为明显的优势。

For the problems that the existing network traffic anomaly detection methods are not suitable for the real-time WSN(Wireless Sensor Networks)and lack reasonable decision mechanisms,a novel Wireless Sensor Networks(WSN)traffic anomaly detection scheme based on BIRCH(Balanced Iterative Reducing and Clustering using Hierarchies)is proposed.Based on expanding the dimension of traffic characteristics,the scheme uses BIRCH algorithm to cluster traffic characteristics.By introducing the dynamic cluster threshold and neighbor cluster serial numbers,the BIRCH process is optimized to improve the clustering quality and performance robustness.Furthermore,to ensure the detection accuracy of the scheme,a comprehensive decision mechanism based on turning point is designed to detect abnormal traffic,combined with prediction and clustering results.The experimental results show that the proposed scheme has obvious advantages in detection effect and stability of detection performance.