{"title":"Enhancing Network Abnormal Detection With NMF-SECNN: Leveraging Deep Feature Learning for High-Precision Traffic Analysis","authors":"Yazhou Yuan;Ning Yu;Zhuolin Zheng;Yong Yang;Kai Ma;Zhixin Liu;Cailian Chen;Jianmin Zhang","doi":"10.1109/TNSE.2025.3544251","DOIUrl":null,"url":null,"abstract":"Detection of abnormalities in industrial network traffic plays a crucial role in maintaining network system security. However, current abnormal detection models suffer from low precision, and extracting deep-level feature information from industrial network traffic is difficult. This leads to the loss of partial feature information during the detection process, thereby affecting detection efficiency. To address this issue, this paper proposes an abnormal traffic detection framework for industrial networks. By employing a Non-negative Matrix Factorization (NMF)-based method for extracting abnormal traffic features and optimizing the NMF decomposition process through constructing label consistency constraints, we facilitate effective feature extraction. Additionally, the Squeeze-and-Excitation attention mechanism is introduced into a Convolutional Neural Network (CNN) to construct a classifier that enhances detection precision without increasing complexity, enabling efficient identification of complex network traffic patterns. This results in the NMF-Squeeze-and-Excitation-CNN (NMF-SECNN) model, which combines effective feature extraction capability with a lightweight structural design, achieving superior detection performance in industrial network environments. The proposed method achieves a detection accuracy of 99.4%, representing a 5.6% improvement over baseline methods, and a recall rate of 98.2%, showcasing the model's capability to identify abnormalities across diverse scenarios. Various classification metrics confirm the model's robustness and effectiveness, demonstrating its significant advantages over traditional methods.","PeriodicalId":54229,"journal":{"name":"IEEE Transactions on Network Science and Engineering","volume":"12 3","pages":"2069-2080"},"PeriodicalIF":6.7000,"publicationDate":"2025-02-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Transactions on Network Science and Engineering","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/10897923/","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"ENGINEERING, MULTIDISCIPLINARY","Score":null,"Total":0}
引用次数: 0
Abstract
Detection of abnormalities in industrial network traffic plays a crucial role in maintaining network system security. However, current abnormal detection models suffer from low precision, and extracting deep-level feature information from industrial network traffic is difficult. This leads to the loss of partial feature information during the detection process, thereby affecting detection efficiency. To address this issue, this paper proposes an abnormal traffic detection framework for industrial networks. By employing a Non-negative Matrix Factorization (NMF)-based method for extracting abnormal traffic features and optimizing the NMF decomposition process through constructing label consistency constraints, we facilitate effective feature extraction. Additionally, the Squeeze-and-Excitation attention mechanism is introduced into a Convolutional Neural Network (CNN) to construct a classifier that enhances detection precision without increasing complexity, enabling efficient identification of complex network traffic patterns. This results in the NMF-Squeeze-and-Excitation-CNN (NMF-SECNN) model, which combines effective feature extraction capability with a lightweight structural design, achieving superior detection performance in industrial network environments. The proposed method achieves a detection accuracy of 99.4%, representing a 5.6% improvement over baseline methods, and a recall rate of 98.2%, showcasing the model's capability to identify abnormalities across diverse scenarios. Various classification metrics confirm the model's robustness and effectiveness, demonstrating its significant advantages over traditional methods.
期刊介绍:
The proposed journal, called the IEEE Transactions on Network Science and Engineering (TNSE), is committed to timely publishing of peer-reviewed technical articles that deal with the theory and applications of network science and the interconnections among the elements in a system that form a network. In particular, the IEEE Transactions on Network Science and Engineering publishes articles on understanding, prediction, and control of structures and behaviors of networks at the fundamental level. The types of networks covered include physical or engineered networks, information networks, biological networks, semantic networks, economic networks, social networks, and ecological networks. Aimed at discovering common principles that govern network structures, network functionalities and behaviors of networks, the journal seeks articles on understanding, prediction, and control of structures and behaviors of networks. Another trans-disciplinary focus of the IEEE Transactions on Network Science and Engineering is the interactions between and co-evolution of different genres of networks.