The invention discloses a distributed detection method and
system for SDN abnormal traffic based on D-VAE-WGAN, and the method comprises the steps: carrying out the cooperative training of a D-VAE-WGAN model based on a collected original traffic sample
data set, and obtaining an optimal D-VAE-WGAN model; the
cloud server sends a copy of the trained
discriminator Dd to each subnet controller, and the copy of the trained
discriminator Dd, an original
encoder Ge, an original decoder Gd and an original
discriminator De in the controller form a detection agent; calculating a
reconstruction error and a discrimination error of the reconstructed sample based on the detection agent, and obtaining an error value of the sample; and judging based on the obtained error value of the sample and a set threshold value, and if the error value is greater than the judged threshold value, judging that the sample is an abnormal sample. According to the method, the problem of
slow convergence of the GAN is solved by taking the VAE as an
encoder, and the risk of'mode collapse 'of the GAN is avoided by taking the Wasserstein distance as similarity measurement. Joint training is carried out by using a generator to exchange parameters, so that each sub-network can learn flow data distribution in other sub-networks, and the overall defense capability of the SDN network is improved.