{"title":"基于卷积自编码器和联邦学习的SDN流量异常检测方法","authors":"Zixuan Wang, Pan Wang, Zhixin Sun","doi":"10.1109/GLOBECOM48099.2022.10001438","DOIUrl":null,"url":null,"abstract":"With the rapid development of the Internet, people pay more and more attention to network security and data privacy. Using the characteristics of SDN data and control separation, it is easy to embed a traffic detection model in edge devices to achieve abnormal traffic detection. However, although the traditional intrusion detection model can provide good recognition accuracy, it requires many labeled samples for model training. Not only is it challenging to obtain labeled samples, but it also brings privacy issues. This paper combines federated learning and anomaly-based CAE model in the SDN network and realizes intrusion detection on encrypted traffic under the premise of effectively protecting data privacy and reducing the workload of data labeling. Furthermore, we design an aggregation model selection algorithm based on loss and data volume evaluation, which reduces the overall training time of the federation and improves the model's accuracy.","PeriodicalId":313199,"journal":{"name":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","volume":"102 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2022-12-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"SDN traffic anomaly detection method based on convolutional autoencoder and federated learning\",\"authors\":\"Zixuan Wang, Pan Wang, Zhixin Sun\",\"doi\":\"10.1109/GLOBECOM48099.2022.10001438\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"With the rapid development of the Internet, people pay more and more attention to network security and data privacy. Using the characteristics of SDN data and control separation, it is easy to embed a traffic detection model in edge devices to achieve abnormal traffic detection. However, although the traditional intrusion detection model can provide good recognition accuracy, it requires many labeled samples for model training. Not only is it challenging to obtain labeled samples, but it also brings privacy issues. This paper combines federated learning and anomaly-based CAE model in the SDN network and realizes intrusion detection on encrypted traffic under the premise of effectively protecting data privacy and reducing the workload of data labeling. Furthermore, we design an aggregation model selection algorithm based on loss and data volume evaluation, which reduces the overall training time of the federation and improves the model's accuracy.\",\"PeriodicalId\":313199,\"journal\":{\"name\":\"GLOBECOM 2022 - 2022 IEEE Global Communications Conference\",\"volume\":\"102 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2022-12-04\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"GLOBECOM 2022 - 2022 IEEE Global Communications Conference\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/GLOBECOM48099.2022.10001438\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/GLOBECOM48099.2022.10001438","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
SDN traffic anomaly detection method based on convolutional autoencoder and federated learning
With the rapid development of the Internet, people pay more and more attention to network security and data privacy. Using the characteristics of SDN data and control separation, it is easy to embed a traffic detection model in edge devices to achieve abnormal traffic detection. However, although the traditional intrusion detection model can provide good recognition accuracy, it requires many labeled samples for model training. Not only is it challenging to obtain labeled samples, but it also brings privacy issues. This paper combines federated learning and anomaly-based CAE model in the SDN network and realizes intrusion detection on encrypted traffic under the premise of effectively protecting data privacy and reducing the workload of data labeling. Furthermore, we design an aggregation model selection algorithm based on loss and data volume evaluation, which reduces the overall training time of the federation and improves the model's accuracy.