Semi-supervised intrusion detection method combining improved Grey Wolf algorithm

Abstract

The invention discloses a semi-supervised intrusion detection method combining the improved grey wolf algorithm, and belongs to the technical field of network information security. The method can effectively avoid the defect that the basic GWO algorithm is prone to premature convergence, and balance the global exploration and local development ability of the GWO algorithm; and the cloud GWO algorithm is used to optimize the K-means algorithm to mark data having similar features, and realization of generation of the large-scale accurate mark training data set is realized on the basis of manually marking the data in a small amount. The proportion of unmarked data and marked data is provided, the phenomenon of "under-fitting" and "over-fitting" of the model is avoided, and the detection accuracy of the model is ensured. The optimized semi-supervised learning method is combined with the cloud GWO algorithm to optimize parameters of a single-class support vector machine model. Compared withthe unilateral optimization, the invention achieves higher detection precision.

Description

technical field [0001] The invention relates to a semi-supervised intrusion detection method of an improved wolf algorithm, which belongs to the technical field of network information security. Background technique [0002] With the rapid development of Industry 4.0 and related technologies, however, there are inevitable loopholes in the existing industrial communication protocols, which make the industrial control network vulnerable to malicious attacks by attackers. In 2010, the attackers used the Stuxnet virus to destroy Iran’s nuclear facilities, causing A serious accident occurred, which sounded the alarm for the safety of industrial control systems. [0003] Industrial control network intrusion detection can be divided into two categories: misuse detection and anomaly detection. For anomaly detection, it can be divided into three categories: statistics-based methods, knowledge-based methods and machine learning-based methods. Commonly used industrial control network i...

AI Technical Summary

Problems solved by technology

However, the basic Gray Wolf Algorithm (GWO) has the disadvantages of difficulty in coordinating exploration and development capabilities and low solution accuracy.

Images