信息安全研究2026，Vol.12Issue(4)：303-310,8.DOI:10.12379/j.issn.2096-1057.2026.04.02
基于改进双向TCN模型的SDN异常流量检测
Anomaly Traffic Detection Based on Improved Bi-directional TCN Model in Software Defined Network
摘要
Abstract
The centralized control feature of software defined network(SDN)technology enhances the efficiency of network management while also bringing more severe security threats.Accurately detecting abnormal traffic in the SDN network is critical for network security.To address the vulnerabilities of SDN networks to various attacks and the insufficient ability of existing methods in modeling the temporal characteristics of abnormal traffic,this paper proposes an abnormal traffic detection method suitable for the SDN environment.This method takes the five-tuple of the flow(source IP address,destination IP address,source port number,destination port number,transport layer protocol)as the division basis.The length sequence of data packets is extracted as the core temporal features.Based on the improved bidirectional temporal convolutional network(BiTCN),by changing the ELU activation function and adding a residual block in the original TCN structure,and simultaneously integrating the multi-head squeeze excitation mechanism(MSE)to enhance the feature modeling ability,the identification of abnormal behaviors is achieved.The experimental results show that the method proposed in this paper achieves good effects on the public SDN dataset,and its accuracy,precision and other indicators are superior to the traditional baseline models.关键词
异常流量检测/软件定义网络/数据包长度/深度学习/时间卷积网络Key words
abnormal traffic detection/software defined network(SDN)/data packet length/deep learning/temporal convolutional network(TCN)分类
信息技术与安全科学引用本文复制引用
孙璇,李彩霞,李军,任亚唯,代海英,余果,周昊..基于改进双向TCN模型的SDN异常流量检测[J].信息安全研究,2026,12(4):303-310,8.基金项目
国网新源控股有限公司科技项目(SGXYKJ-2025-033) （SGXYKJ-2025-033）
