arXiv:2504.18566cs.CRcs.AI2025-04被引 5

用生成对抗网络自动选关键特征,提升防御大规模攻击的效率

Feature Selection via GANs (GANFS): Enhancing Machine Learning Models for DDoS Mitigation

  • 用GAN只在攻击流量上训练,通过判别器敏感度分析找重要特征
  • 在CIC-DDoS2019数据集上将特征维度大幅降低,分类准确率提升
  • 无需全量标注数据,适合复杂动态的网络安全场景

分布式拒绝服务(DDoS)攻击对现代网络系统构成持续且演进的威胁,常隐藏于高维冗余的网络流量中,亟需智能特征选择技术以实现有效检测。传统过滤、包装和嵌入式方法虽各有优势,但在复杂攻击环境下面临可扩展性与适应性不足的问题。本文通过对比分析揭示其局限性,并提出一种基于生成对抗网络的特征选择方法(GANFS),利用对抗学习机制从攻击流量中识别最具信息量的特征。该方法仅在攻击数据上训练GAN,并通过对判别器进行扰动敏感性分析,无须全监督即可排序特征重要性。在CIC-DDoS2019数据集上的实验表明,GANFS不仅显著提升下游分类器的准确率,还大幅降低特征维度,增强计算效率。结果表明,将生成式模型融入网络安全流程,有望构建更自适应、可扩展的检测系统。

原文摘要 · Abstract (English)

Distributed Denial of Service (DDoS) attacks represent a persistent and evolving threat to modern networked systems, capable of causing large-scale service disruptions. The complexity of such attacks, often hidden within high-dimensional and redundant network traffic data, necessitates robust and intelligent feature selection techniques for effective detection. Traditional methods such as filter-based, wrapper-based, and embedded approaches, each offer strengths but struggle with scalability or adaptability in complex attack environments. In this study, we explore these existing techniques through a detailed comparative analysis and highlight their limitations when applied to large-scale DDoS detection tasks. Building upon these insights, we introduce a novel Generative Adversarial Network-based Feature Selection (GANFS) method that leverages adversarial learning dynamics to identify the most informative features. By training a GAN exclusively on attack traffic and employing a perturbation-based sensitivity analysis on the Discriminator, GANFS effectively ranks feature importance without relying on full supervision. Experimental evaluations using the CIC-DDoS2019 dataset demonstrate that GANFS not only improves the accuracy of downstream classifiers but also enhances computational efficiency by significantly reducing feature dimensionality. These results point to the potential of integrating generative learning models into cybersecurity pipelines to build more adaptive and scalable detection systems.

特征选择对抗网络网络安全异常检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。