DAPNet融合时序与变量关联分析,提升网络状态分类精度。
Dynamic Adaptive Parsing of Temporal and Cross-Variable Patterns for Network State Classification
- 采用专家混合架构,动态分配时序、变量关联和混合特征专家权重。
- 在CICIDS2017/2018上达到98.6%准确率,优于现有方法。
- 适合需要同时捕捉时序规律与变量关系的网络异常检测场景。
有效的网络状态分类对保障网络安全和优化性能至关重要。现有深度学习模型在该领域取得显著进展,部分方法擅长分析流量数据中的复杂周期性,而基于图的方法则能有效建模不同变量间的动态依赖关系。然而,两者存在关键权衡:侧重时序的模型常忽略变量间重要依赖,而聚焦依赖的模型难以捕捉精细时序细节。为解决此矛盾,本文提出DAPNet,一种基于专家混合架构的框架。DAPNet集成三个专用网络:周期性分析、动态变量相关性建模和混合时序特征提取。一个可学习的门控网络根据输入样本动态分配专家权重,并计算加权输出融合。此外,引入混合正则化损失函数以保证训练稳定并缓解类别不平衡问题。在两个大规模网络入侵检测数据集(CICIDS2017/2018)上的大量实验验证了DAPNet在目标应用中的更高准确率。其架构设计的泛化能力在十个公开的UEA基准数据集上得到评估,确立了DAPNet作为网络状态分类专用框架的地位。
原文摘要 · Abstract (English)
Effective network state classification is a primary task for ensuring network security and optimizing performance. Existing deep learning models have shown considerable progress in this area. Some methods excel at analyzing the complex temporal periodicities found in traffic data, while graph-based approaches are adept at modeling the dynamic dependencies between different variables. However, a key trade-off remains, as these methods struggle to capture both characteristics simultaneously. Models focused on temporal patterns often overlook crucial variable dependencies, whereas those centered on dependencies may fail to capture fine-grained temporal details. To address this trade-off, we introduce DAPNet, a framework based on a Mixture-of-Experts architecture. DAPNet integrates three specialized networks for periodic analysis, dynamic cross-variable correlation modeling, and hybrid temporal feature extraction. A learnable gating network dynamically assigns weights to experts based on the input sample and computes a weighted fusion of their outputs. Furthermore, a hybrid regularization loss function ensures stable training and addresses the common issue of class imbalance. Extensive experiments on two large-scale network intrusion detection datasets (CICIDS2017/2018) validate DAPNet's higher accuracy for its target application. The generalizability of the architectural design is evaluated across ten public UEA benchmark datasets, positioning DAPNet as a specialized framework for network state classification.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。