面向资源受限车载网络的半监督入侵检测方法

Semi-supervised intrusion detection for resource-constrained vehicular networks

  • 摘要: 针对传统车载网入侵检测方法中,需要大量标记数据及难以检测未知攻击等问题,提出基于半监督学习的轻量级入侵检测的密集伪标签方法.主要包含如下3个过程:1)利用课程标签算法给无标签数据打上伪标签;2)将原标签及带伪标签数据控制器的局域网标识符字段进行二进制编码后转化为图像,并运用密集卷积网络进行训练和测试;3)超参数优化密集卷积网络后对混合数据集进行分类.试验结果表明:该方法在标注数据为汽车黑客数据集和某入侵检测数据集总数据量的40%情形下,准确率和召回率均 > 0.9,错误率均< 0.1%;该方法在实现检测注入控制器局域网总线已知和未知攻击的同时可有效缩短检测时间,减少内存使用.

     

    Abstract: To address issues in traditional in-vehicle network intrusion detection, such as need for large amount of labeled data and difficulty to detect unknown attacks, a lightweight intrusion detection method based on semi-supervised learning and dense pseudo-labeling is proposed. Three processes are involved in this new method. Curriculum-based labeling algorithm is used to assign pseudo-labels to unlabeled data. Original labels and LAN identifier fields of data with pseudo-labels are binary encoded and converted into images, a dense convolutional network is then used for training and testing. The hyperparameters of the dense convolutional network is optimized before mixed dataset is classified. When the labeled data are 40% of total data volume of Automotive Hacker Dataset and a certain intrusion detection dataset, both the accuracy and recall rates are > 0.9, with error rates of < 0.1%. This method can effectively shorten detection time and reduce memory usage while detecting known and unknown attacks injected into the controller area network bus.

     

/

返回文章
返回