网络与信息安全学报 ›› 2022, Vol. 8 ›› Issue (1): 41-51.doi: 10.11959/j.issn.2096-109x.2021092

• 专栏:安全感知与检测方法 • 上一篇    下一篇

融合注意力机制和BSRU的工业互联网安全态势预测方法

胡向东, 田正国   

  1. 重庆邮电大学自动化学院/工业互联网学院,重庆 400065
  • 修回日期:2021-06-24 出版日期:2022-02-15 发布日期:2022-02-01
  • 作者简介:胡向东(1971− ),男,四川广安人,博士,重庆邮电大学教授、博士生导师,主要研究方向为物联网安全智能理论与技术、智能感知、网络化测量与工业大数据安全、复杂系统建模仿真与优化
    田正国(1995− ),男,江苏徐州人,重庆邮电大学硕士生,主要研究方向为工业互联网安全
  • 基金资助:
    教育部-中国移动科研基金(MCM20150202);教育部-中国移动科研基金(MCM20180404)

Methods of security situation prediction for industrial internet fused attention mechanism and BSRU

Xiangdong HU, Zhengguo TIAN   

  1. College of Automation/Industrial Internet Institute, Chongqing University of Posts and Telecommunications, Chongqing 400065, China
  • Revised:2021-06-24 Online:2022-02-15 Published:2022-02-01
  • Supported by:
    The Joint Research Foundation of the Ministry of Education of the People’s Republic of China and China Mobile(MCM20150202);The Joint Research Foundation of the Ministry of Education of the People’s Republic of China and China Mobile(MCM20180404)

摘要:

安全态势预测对确保工业互联网平稳可靠运行至关重要。传统的预测模型在面对工业生产过程中产生的海量、高维和时间序列数据时,难以准确、高效地对网络安全态势进行预测,因此提出一种融合注意力机制和双向简单循环单元(BSRU,bi-directional simple recurrent unit)的工业互联网安全态势预测方法,以满足工业生产的实时性和准确性要求。对各安全要素进行分析和处理,使其能反映当前网络状态,便于态势值的求取。使用一维卷积网络提取各安全要素之间的空间维度特征,保留特征间的时间相关性。利用BSRU网络提取信息之间的时间维度特征,减少历史信息的丢失,同时借助 SRU 网络强大的并行能力,减少模型的训练时间。引入注意力机制优化 BSRU 隐含状态中的相关性权重,以突出强相关性因素,减少弱相关性因素的影响,实现融合注意力机制和BSRU的工业互联网安全态势预测。对比实验结果显示,该模型较使用双向长短期记忆网络和双向门控循环单元的预测模型,在训练时间和训练误差上分别减少了 13.1%和 28.5%;相比于没有使用注意力机制的卷积和BSRU网络融合模型,训练时间虽增加了2%,但预测误差降低了28.8%;在不同预测时长下该模型的预测效果优于其他模型,实现了在时间性能上的优化,使用注意力机制在增加少量时间成本的前提下,提升了模型的预测精度,能够较好地拟合网络安全态势发展,且模型在多步预测上存在一定的优势。

关键词: 工业互联网, 注意力机制, 简单循环单元, 安全态势

Abstract:

The security situation prediction plays an important role in balanced and reliable work for industrial internet.In the face of massive, high-dimensional and time-series data generated in the industrial production process, traditional prediction models are difficult to accurately and efficiently predict the network security situation.Therefore, the methods of security situation prediction for industrial internet fused attention mechanism and bi-directional simple recurrent unit (BSRU) were proposed to meet the real-time and accuracy requirements of industrial production.Each security element was analyzed and processed, so that it could reflect the current network state and facilitate the calculation of the situation value.One-dimensional convolutional network was used to extract the spatial dimension features between each security element and preserve the temporal correlation between features.The BSRU network was used to extract the time dimension features between the data information and reduced the loss of historical information.Meanwhile, with the powerful parallel capability of SRU network, the training time of model was reduced.Attention mechanism was introduced to optimize the correlation weight of BSRU hidden state to highlight strong correlation factors, reduced the influence of weak correlation factors, and realized the prediction of industrial internet security situation combining attention mechanism and BSRU.The comparative experimental results show that the model reduces the training time and training error by 13.1% and 28.5% than the model using bidirectional long short-term memory network and bidirectional gated recurrent unit.Compared with the convolutional and BSRU network fusion model without attention mechanism, the prediction error is reduced by 28.8% despite the training time increased by 2%.The prediction effect under different prediction time is better than other models.Compared with other prediction network models, this model achieves the optimization of time performance and uses the attention mechanism to improve the prediction accuracy of the model under the premise of increasing a small amount of time cost.The proposed model can well fit the trend of network security situation, meanwhile, it has some advantages in multistep prediction.

Key words: industrial internet, attention mechanism, simple recurrent unit, security situation

中图分类号: 

No Suggested Reading articles found!