Chinese Journal of Network and Information Security ›› 2018, Vol. 4 ›› Issue (7): 48-59.doi: 10.11959/j.issn.2096-109x.2018056

• Papers • Previous Articles     Next Articles

Combinatorial intrusion detection model based on deep recurrent neural network and improved SMOTE algorithm

Binghao YAN,Guodong HAN   

  1. National Digital Switching System Engineering and Technological Research Center,Zhengzhou 450002,China
  • Revised:2018-07-05 Online:2018-07-01 Published:2018-09-10
  • Supported by:
    The National Science Technology Major Project of China(2016ZX01012101);The National Natural Science Foundation Project of China(61572520);The National Natural Science Foundation Innovation Group Project of China(61521003)


Existing intrusion detection models generally only analyze the static characteristics of network intrusion actions,resulting in low detection rate and high false positive rate,and cannot effectively detect low-frequency attacks.Therefore,a novel combinatorial intrusion detection model (DRRS) based on deep recurrent neural network (DRNN) and region adaptive synthetic minority oversampling technique algorithm (RA-SMOTE) was proposed.Firstly,RA-SMOTE divided the low frequency attack samples into different regions adaptively and improved the number of low-frequency attack samples with different methods from the data level.Secondly,the multi-stage classification features were learned by using the level feedback units in DRNN,at the same time,the multi-layer network structure achieved the optimal non-linear fitting of the original data distribution.Finally,the intrusion detection was completed by trained DRRS.The empirical results show that compared with the traditional intrusion detection models,DRRS significantly improves the detection rate of low-frequency attacks and overall detection efficiency.Besides,DRRS has a certain detection rate for unknown new attacks.So DRRS model is effective and suitable for the actual network environment.

Key words: network security, deep learning, intrusion detection, DRNN, oversampling algorithm

CLC Number: 

No Suggested Reading articles found!