Method for carrying out classification detection on network attack behaviors through utilization of machine learning technology

Abstract

The invention relates to a method for carrying out classification detection on network attack behaviors through utilization of a machine learning technology and belongs to the technical field of information. The method comprises the steps of 1, collecting network data and carrying out preprocessing to obtain training data; 2, establishing and training a multilevel classifier; and carrying out classification detection on test data through utilization of the trained multilevel classifier. Compared with the prior art, the method provided by the invention has the advantages that 1, through utilization of a preprocessing method for the collection data, the data scale can be reduced, moreover, partial unrelated data is removed, and the integrated efficiency is improved; 2, through utilization ofthe multilevel classifier and an integrated learning thought, the problem that a single classifier is low in fitting precision is solved, and the detection precision of the system is greatly improved; and 3, through design of a data blocking method based on an improved random forest algorithm, different types of attach behavior detection can be realized as parallel algorithms, so the integrated detection speed of the system is improved.

Description

technical field [0001] The invention relates to a method for classifying and detecting network attack behaviors by using machine learning technology, which belongs to the technical field of information security. Background technique [0002] While the development of network and computer technology brings convenience to people's life, the security problem of network system also brings new troubles. Due to the exponential growth in the number and types of cyber attacks, networks and information systems are facing serious security threats. In this context, it is of great theoretical and practical value to study network security protection methods. [0003] In order to protect the security of the network system, identify and prevent the attack behavior inside and outside the system and the user's unauthorized behavior, researchers have proposed the active monitoring technology of the network system. This technology actively generates load to the monitored network through the m...

AI Technical Summary

Problems solved by technology

When the number of monitoring nodes increases, the active monitoring of the network becomes more complex, so it is necessary to propose an analysis method with better detection accuracy and detection time

Images