arXiv:2507.10758cs.AIcs.LG2025-07被引 3

用深度学习与图模型检测物联网恶意流量,BERT表现最佳。

IoT Malware Network Traffic Detection using Deep Learning and GraphSAGE Models

  • 结合BERT、GraphSAGE等模型捕捉网络流量时序特征
  • BERT达99.94%准确率,F1-score高达99.99%
  • 多头注意力模型可解释性强,但计算开销大

本文旨在通过深度学习模型检测物联网恶意攻击,并全面评估深度学习与图模型在恶意网络流量检测中的表现。所采用模型包括GraphSAGE、BERT、TCN、多头注意力机制,以及BI-LSTM与LSTM组合模型。实验表明,物联网流量具有显著的时序性与多样性,为模型学习提供了丰富模式。BERT表现最优,准确率达99.94%,精确率、召回率、F1-score和AUC-ROC均达99.99%,充分展现其对时序依赖的建模能力。多头注意力模型检测效果良好且结果可解释,但计算耗时长,与BI-LSTM类似。GraphSAGE训练时间最短,但准确率、精确率和F1-score均为最低。

原文摘要 · Abstract (English)

This paper intends to detect IoT malicious attacks through deep learning models and demonstrates a comprehensive evaluation of the deep learning and graph-based models regarding malicious network traffic detection. The models particularly are based on GraphSAGE, Bidirectional encoder representations from transformers (BERT), Temporal Convolutional Network (TCN) as well as Multi-Head Attention, together with Bidirectional Long Short-Term Memory (BI-LSTM) Multi-Head Attention and BI-LSTM and LSTM models. The chosen models demonstrated great performance to model temporal patterns and detect feature significance. The observed performance are mainly due to the fact that IoT system traffic patterns are both sequential and diverse, leaving a rich set of temporal patterns for the models to learn. Experimental results showed that BERT maintained the best performance. It achieved 99.94% accuracy rate alongside high precision and recall, F1-score and AUC-ROC score of 99.99% which demonstrates its capabilities through temporal dependency capture. The Multi-Head Attention offered promising results by providing good detection capabilities with interpretable results. On the other side, the Multi-Head Attention model required significant processing time like BI-LSTM variants. The GraphSAGE model achieved good accuracy while requiring the shortest training time but yielded the lowest accuracy, precision, and F1 score compared to the other models

物联网安全深度学习图神经网络流量检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。