arXiv:2505.21703cs.CRcs.AI2025-05中稿 · publication in the…被引 9

用自编码器+三元组损失检测车联网未知攻击,准确率超97%。

A Joint Reconstruction-Triplet Loss Autoencoder Approach Towards Unseen Attack Detection in IoV Networks

  • 基于重构损失与三元组损失联合训练自编码器,学习正常数据特征。
  • 对未见过的攻击类型检测准确率达97%-100%,良性数据识别准确率约99%。
  • 支持跨领域迁移,适合车联网等高动态网络的安全防护场景。

车联网系统虽提升交通效率与安全,但因高度互联带来显著安全风险。此类系统在车辆、基础设施与云服务间产生海量数据,形成广泛攻击面。针对以拒绝服务(DoS)为代表的网络中心攻击,会阻断关键交通安全信息传输,凸显其安全挑战已超越传统保密性、完整性与可用性范畴。面对数据复杂性和体量,传统安全机制难以有效识别复杂多变的网络攻击。本文提出一种完全基于良性数据训练的无监督自编码器方法,用于车联网中未知攻击检测。通过加权组合重构损失与三元组间隔损失,引导模型学习多样化的良性数据表示。在工业物联网和家庭物联网两个应用领域的最新入侵数据集上进行大量实验,验证了该方法对所有未知攻击类型的鲁棒性:良性数据识别准确率约99%,异常数据检测性能在97%至100%之间。进一步表明,通过迁移学习,模型可利用一个领域的域特征适应另一领域,仍保持高精度表现。

原文摘要 · Abstract (English)

Internet of Vehicles (IoV) systems, while offering significant advancements in transportation efficiency and safety, introduce substantial security vulnerabilities due to their highly interconnected nature. These dynamic systems produce massive amounts of data between vehicles, infrastructure, and cloud services and present a highly distributed framework with a wide attack surface. In considering network-centered attacks on IoV systems, attacks such as Denial-of-Service (DoS) can prohibit the communication of essential physical traffic safety information between system elements, illustrating that the security concerns for these systems go beyond the traditional confidentiality, integrity, and availability concerns of enterprise systems. Given the complexity and volume of data generated by IoV systems, traditional security mechanisms are often inadequate for accurately detecting sophisticated and evolving cyberattacks. Here, we present an unsupervised autoencoder method trained entirely on benign network data for the purpose of unseen attack detection in IoV networks. We leverage a weighted combination of reconstruction and triplet margin loss to guide the autoencoder training and develop a diverse representation of the benign training set. We conduct extensive experiments on recent network intrusion datasets from two different application domains, industrial IoT and home IoT, that represent the modern IoV task. We show that our method performs robustly for all unseen attack types, with roughly 99% accuracy on benign data and between 97% and 100% performance on anomaly data. We extend these results to show that our model is adaptable through the use of transfer learning, achieving similarly high results while leveraging domain features from one domain to another.

车联网安全异常检测自编码器迁移学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。