电子科技大学学报2025，Vol.54Issue(3)：442-454,13.DOI:10.12178/1001-0548.2024083
结合混合特征选择和Transformer的网络数据流异常检测
Network data anomaly detection combined with hybrid feature selection and Transformer
摘要
Abstract
The intelligent learning method plays a crucial role in network data anomaly analysis.However,traditional intelligent anomaly analysis methods often struggle to strike a balance among the interpretability of network data analysis results,the consumption of computing resources for anomaly analysis,and the accuracy of analyzing network data stream sequences.To address these challenges,a novel network data flow anomaly detection model combining hybrid feature selection and Transformer is proposed.This model conducts data preprocessing via a hybrid feature selection method and performed anomaly detection based on an enhanced Transformer model.A hybrid feature selection algorithm,utilizing both tree models and mutual information,is employed to reduce the dimensionality of network data features.The encoder part of the Transformer serves as the core of the classification task,and convolution operations are integrated to enhance the local perception ability of network data stream sequences.Classification is then performed using a classification header.The proposed method has been simulated and validated using the publicly available intrusion detection dataset CICIDS2017.Experimental results demonstrate that the proposed model effectively detects network data flow anomalies,outperforming intrusion detection methods based on neural networks.关键词
混合特征选择/随机森林/互信息/自注意力机制/异常检测Key words
hybrid feature selection/random forest/mutual information/self-attention mechanism/anomaly detection分类
信息技术与安全科学引用本文复制引用
向思羽,刘才铭..结合混合特征选择和Transformer的网络数据流异常检测[J].电子科技大学学报,2025,54(3):442-454,13.基金项目
四川省科技计划项目(2025ZNSFSC0503) （2025ZNSFSC0503）
乐山师范学院科研培育项目(KYPY202-0005) （KYPY202-0005）
