Correlation-based advanced feature analysis for wireless sensor networks

초록

In this study, we focus on real-time anomaly detection using the gated graph neural network (GGNN) and long short-term memory (LSTM) algorithms for the most commonly used network protocols of HTTP and TELNET. In a network, the flow of the various protocols is determined by their respective roles. Each protocol consists of options with individual tasks, and protocols are processed based on these tasks. Therefore, when analyzing flow, a unique repetitive pattern emerges according to the flow and mission. Accordingly, when an anomaly signal is involved, the pattern shows different characteristics from the existing pattern. This study identifies the flow of input and output values based on the correlation between the options defined at each port, whereby the correlation is analyzed, and the detection accuracy of the anomaly signal is determined using the GGNN and LSTM algorithms. The experimental results demonstrate an accuracy of 99.36% for GGNN and 89.46% for LSTM in detecting network anomalies.

키워드