AI安全代理可自动检测高校教务系统多种威胁并快速响应
An AI Security Agent for University ACMIS: Multi-Vector Threat Detection and Automated Response

- 用AI结合行为分析与自然语言处理实现多层威胁检测
- 检测准确率F1达0.966,关键响应延迟低于1毫秒
- 适合高校及机构信息化部门部署,防护复杂攻击
高校学术管理系统(ACMIS)是各类安全威胁的高价值目标,包括暴力破解登录、支付欺诈、权限提升、内部数据窃取和学术不端等。传统规则式入侵检测系统因难以区分恶意行为与正常操作而失效。本文提出一种基于AI的安全代理,融合监督异常检测、行为分析与自然语言处理聊天机器人,实现安全密码恢复。该代理监控认证、授权、财务交易、用户行为与系统健康五个层面,通过四级风险升级框架响应。模块化架构支持扩展至其他机构系统。在包含147,922次会话的模拟事件日志上,威胁检测宏平均F1达到0.966,远超规则基线(0.156)与仅序列模型(LSTM,0.836);单节点原型上关键级自动化响应延迟低于1毫秒。集成恢复聊天机器人身份验证准确率达97.1%,对大规模重置攻击检测率达87.3%,且在合法高频率恢复期无误报。
原文摘要 · Abstract (English)
University Academic Management Information Systems (ACMIS) are high-value targets for a wide spectrum of security threats including brute-force login attacks, payment fraud, privilege escalation, insider data theft, and academic integrity violations. Traditional rule-based intrusion detection systems are inadequate because many malicious activities are structurally indistinguishable from normal operations. This paper presents an AI-based security agent for ACMIS that combines supervised anomaly detection, behavioural analytics, and a natural language processing chatbot for secure password recovery. The agent monitors five operational layers: authentication, authorisation, financial transactions, user behaviour, and system health, and responds through a four-tier risk escalation framework. A modular architecture allows the core engine to be extended to other institutional systems. Experiments on a simulated ACMIS event log dataset of 147,922 sessions demonstrate a threat detection macro-average F1 of 0.966, compared to 0.156 for a rule-based baseline and 0.836 for a sequence-only (LSTM) baseline, with end-to-end critical-tier automated response latency under 1 ms on a single-node prototype. The integrated recovery chatbot achieves 97.1 percent identity verification accuracy and an 87.3 percent mass-reset attack detection rate with zero false positives on legitimate high volume recovery periods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。