MamNet融合时频域分析,提升网络流量异常检测精度
MamNet: A Novel Hybrid Model for Time-Series Forecasting and Frequency Pattern Analysis in Network Traffic
- 用Mamba捕捉长期依赖,傅里叶变换提取周期特征
- 在UNSW-NB15和CAIDA数据集上提升2%-4%检测性能
- 适合网络安全与流量管理中的多尺度异常检测
网络流量异常波动可能预示安全威胁或系统故障,因此高效的流量预测与异常检测对网络安全和流量管理至关重要。本文提出一种新型混合模型MamNet,结合时域建模与频域特征提取。模型首先通过Mamba模块(时域建模)捕捉网络流量的长期依赖关系,再利用傅里叶变换识别流量中的周期性波动。在特征融合层,多尺度信息被整合以增强异常检测能力。在UNSW-NB15和CAIDA数据集上的实验表明,MamNet在准确率、召回率和F1分数上优于多个主流模型,尤其在复杂流量模式和长期趋势检测中性能提升约2%至4%。结果表明,MamNet能有效捕捉不同时间尺度下的网络流量异常,适用于网络安全与流量管理中的异常检测任务。未来工作可引入外部网络事件信息进一步优化模型结构,提升其在复杂网络环境中的适应性与稳定性。
原文摘要 · Abstract (English)
The abnormal fluctuations in network traffic may indicate potential security threats or system failures. Therefore, efficient network traffic prediction and anomaly detection methods are crucial for network security and traffic management. This paper proposes a novel network traffic prediction and anomaly detection model, MamNet, which integrates time-domain modeling and frequency-domain feature extraction. The model first captures the long-term dependencies of network traffic through the Mamba module (time-domain modeling), and then identifies periodic fluctuations in the traffic using Fourier Transform (frequency-domain feature extraction). In the feature fusion layer, multi-scale information is integrated to enhance the model's ability to detect network traffic anomalies. Experiments conducted on the UNSW-NB15 and CAIDA datasets demonstrate that MamNet outperforms several recent mainstream models in terms of accuracy, recall, and F1-Score. Specifically, it achieves an improvement of approximately 2% to 4% in detection performance for complex traffic patterns and long-term trend detection. The results indicate that MamNet effectively captures anomalies in network traffic across different time scales and is suitable for anomaly detection tasks in network security and traffic management. Future work could further optimize the model structure by incorporating external network event information, thereby improving the model's adaptability and stability in complex network environments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。