Industrial Internet intrusion detection method based on capsule network

Abstract

The invention relates to an industrial Internet intrusion detection method based on a capsule network, and belongs to the technical field of Internet security. The method comprises: firstly, subjecting data to imaging processing so as to recognize abstract features; then constructing a feature extraction front end by using an ultra-deep convolutional neural network, and meanwhile, introducing a global average pooling layer to improve the quality of an extracted feature map. On this basis, a dynamic routing algorithm is introduced, intrusion data features are clustered in an iterative mode, and detection and classification of various attacks are completed in a capsule network module. According to the method, multiple pooling layers are used for greatly reducing the data dimension, and thespace complexity of the algorithm is reduced. In a back propagation (BP) process, an Adam method is used as an optimization algorithm, a model training learning rate is dynamically adjusted, and stable convergence of the model is ensured to achieve an optimal effect. Compared with the prior art, the method is high in detection accuracy and lower in false alarm rate and missing report rate in industrial Internet networking intrusion detection.

Description

technical field [0001] The invention belongs to the field of Internet security, and relates to a capsule network-based industrial Internet intrusion detection method. Background technique [0002] In recent years, with the in-depth development of informatization construction, the industrial Internet has been widely used in many industrial fields such as intelligent manufacturing, transportation, power and water conservancy, food and medicine. However, due to historical and technical reasons, traditional industrial control systems are physically isolated from the outside world, focusing on system stability and functional safety, and lacking consideration for information security. With the continuous development of industrial informatization, the industrial control network and the Internet are deeply integrated, and more and more general-purpose software systems and network facilities are applied to the industrial control system, forming the prototype of the industrial Interne...

AI Technical Summary

Problems solved by technology

On the one hand, these mature technologies have promoted the rapid development of industrial control systems, but at the same time, they have broken the security advantage of physical isolation of the system, making the industrial control system more and more serious hidden dangers of malicious attacks such as Trojan horse viruses.

Images