The invention discloses a hierarchical Mama and multi-
modal fusion unknown network
threat detection method based on physical boundary
perception, and relates to the technical field of network space security and
artificial intelligence crossing, and the method comprises the steps: carrying out physical boundary
perception preprocessing on original network traffic, and extracting
byte modal features and statistical
modal features; constructing a layered Mama
encoder, extracting a load
semantic feature of each data packet, and extracting a
time sequence interaction feature between the data packets; inputting the
byte modal features and the statistical modal features into a multi-modal gating fusion module to generate an anti-
confusion stream representation vector; and based on the
mask reconstruction pre-training model, calculating a
reconstruction error of the input flow. According to the method, the
physical level of a network protocol is strictly aligned, stable
detection performance can still be kept, extremely high reasoning speed and low
video memory occupation are kept, the limitation that a traditional closed set classifier can only recognize known attacks is broken through, and the blank of an efficient flow detection model in the field of open set detection is filled up.