基于时频图与改进E-GraphSAGE的网络流量特征提取方法

A Method of Feature Extraction for Network Traffic Based on Time-Frequency Diagrams and Improved E-GraphSAGE

由于网络系统的时变性,时域空间网络流量不稳定并且分离难度高,传统时空网络模型对时空序列数据空间结构的刻画和对时空特征的挖掘不充分。针对上述问题,文章提出一种基于时频图与改进E-GraphSAGE的网络流量特征提取方法。首先以bior1.3小波基函数为势变基底,完成原始流量一维时域向时频域空间的映射变换,通过可视化分析去除噪声频段;然后在E-GraphSAGE模型的内部融合Conv LSTM模型,构建融合时空长期依赖特征的三维特征提取方法;最后获得包含局部和全局信息的时空频三维特征的边缘嵌入信息,解决了传统时空特征提取模型存在的整体信息缺失问题。可视化分析和分类实验结果表明,处理后的流量特征具有更高的稳定性和可分离度。同时,将文章所提方法与其他关联度较高的方法进行比较,结果表明文章所提方法在准确率、精确度、召回率及F1-score上均表现较好。

Due to the time variability of the network system,the instability of time-space network traffic and the difficulty of separation,and the traditional spatiotemporal network model are insufficient in characterizing the spatial structure of spatiotemporal sequence data and mining spatiotemporal features.Therefore,a method of feature extraction for network traffic based on time-frequency diagrams and improved E-GraphSAGE was proposed.Firstly,based on the potential change of the bior1.3 wavelet basis function,the mapping transformation of original traffic from the one-dimensional time domain to the time-frequency domain was completed,and the noise band was removed by visual analysis.Then,the 1D ConvLSTM model was fused within the E-GraphSAGE model to construct a 3D feature extraction method that integrated spatiotemporal and long-term dependent features.Finally,edge embedding of spatiotemporal frequency 3D features containing local and global information was obtained to solve the problem of global information loss in traditional spatiotemporal feature extraction models.The visual analysis and multi-classification experiments show that the traffic characteristics processed in this paper have higher stability and separability.At the same time,comparing with other methods with higher correlation degrees,this method achieves better results in accuracy,accuracy,recall rate,and F1-score.