Network Anomaly Traffic Detection Method Based on Multi-SAE and LSTM

Abstract

For the purpose of faster and more accurate anomalous traffic detection with increasing classes of data traffic in the network, this paper proposes a new anomalous traffic detection method based on stacked auto-encoders and a long short-term memory network model. The method uses Multi-SAE to extract the effective features of sequential traffic, which is obtained by concatenating multiple stacked auto-encoders, and a long short-term memory network to extract the temporal structure of the effective features, with the Multi-SAE and the long short-term memory network in a back-and-forth tandem structure. To further improve the efficiency of the detection, redundant MAC addresses are also removed in the pre-processing. From the experimental results, this paper achieves effective detection of twenty types of data traffic with an accuracy rate of 98.25%, which is higher than that of the same category of research by nearly 2 percentage points, and the parameters of precision, recall and f1-score also reach over 96%, improving the detection results.