融合注意力机制和 BSRU 的工业互联网安全态势预测方法

Methods of security situation prediction for industrial internet fused attention mechanism and BSRU

安全态势预测对确保工业互联网平稳可靠运行至关重要。传统的预测模型在面对工业生产过程中产生的海量、高维和时间序列数据时,难以准确、高效地对网络安全态势进行预测,因此提出一种融合注意力机制和双向简单循环单元(BSRU,bi-directional simple recurrent unit)的工业互联网安全态势预测方法,以满足工业生产的实时性和准确性要求。对各安全要素进行分析和处理,使其能反映当前网络状态,便于态势值的求取。使用一维卷积网络提取各安全要素之间的空间维度特征,保留特征间的时间相关性。利用BSRU网络提取信息之间的时间维度特征,减少历史信息的丢失,同时借助SRU网络强大的并行能力,减少模型的训练时间。引入注意力机制优化BSRU隐含状态中的相关性权重,以突出强相关性因素,减少弱相关性因素的影响,实现融合注意力机制和BSRU的工业互联网安全态势预测。对比实验结果显示,该模型较使用双向长短期记忆网络和双向门控循环单元的预测模型,在训练时间和训练误差上分别减少了13.1%和28.5%;相比于没有使用注意力机制的卷积和BSRU网络融合模型,训练时间虽增加了2%,但预测误差降低了28.8%;在不同预测时长下该模型的预测效果优于其他模型,实现了在时间性能上的优化,使用注意力机制在增加少量时间成本的前提下,提升了模型的预测精度,能够较好地拟合网络安全态势发展,且模型在多步预测上存在一定的优势。

The security situation prediction plays an important role in balanced and reliable work for industrial internet.In the face of massive,high-dimensional and time-series data generated in the industrial production process,traditional prediction models are difficult to accurately and efficiently predict the network security situation.Therefore,the methods of security situation prediction for industrial internet fused attention mechanism and bi-directional simple recurrent unit(BSRU)were proposed to meet the real-time and accuracy requirements of industrial production.Each security element was analyzed and processed,so that it could reflect the current network state and facilitate the calculation of the situation value.One-dimensional convolutional network was used to extract the spatial dimension features between each security element and preserve the temporal correlation between features.The BSRU network was used to extract the time dimension features between the data information and reduced the loss of historical information.Meanwhile,with the powerful parallel capability of SRU network,the training time of model was reduced.Attention mechanism was introduced to optimize the correlation weight of BSRU hidden state to highlight strong correlation factors,reduced the influence of weak correlation factors,and realized the prediction of industrial internet security situation combining attention mechanism and BSRU.The comparative experimental results show that the model reduces the training time and training error by 13.1%and 28.5%than the model using bidirectional long short-term memory network and bidirectional gated recurrent unit.Compared with the convolutional and BSRU network fusion model without attention mechanism,the prediction error is reduced by 28.8%despite the training time increased by 2%.The prediction effect under different prediction time is better than other models.Compared with other prediction network models,this model achieves the optimization of time performance and uses the attention mechanism to improve the prediction accuracy of the model under the premise of increasing a small amount of time cost.The proposed model can well fit the trend of network security situation,meanwhile,it has some advantages in multistep prediction.