The invention discloses a network traffic deep
packet detection and malicious
behavior recognition system, which relates to the technical field of
network security, and comprises a traffic feature multi-dimensional extraction module, a dynamic graph construction and updating module, an adaptive graph attention recognition module and a
closed loop feedback optimization module. A
network communication relation is modeled into a dynamic graph structure, a graph neural network based on a dynamic attention mechanism is adopted to identify malicious behaviors such as
botnet, transverse movement and data leakage,
system parameters are continuously optimized through a closed-loop feedback mechanism, and the four modules form a deep
coupling closed-loop cooperative
system. According to the method, the mutual promotion and superposition synergistic effect is achieved, the system malicious
behavior recognition accuracy rate reaches 96% or above, the
processing delay is controlled at the
microsecond level, and the method can be applied to
network security protection of operator networks and large enterprises.