公开(公告)号：US20230351198A1

公开(公告)日：2023-11-02

申请号：US17979728

申请日：2022-11-02

Applicant: FOUNDATION OF SOONGSIL UNIVERSITY- INDUSTRY COOPERATION

Inventor： Minhae KWON ,  Hyoseon KYE ,  Miru KIM

IPC: G06N3/091 ,  H04L9/40 ,  G06N3/0455

CPC classification number: G06N3/091 ,  H04L63/1425 ,  G06N3/0455

Abstract: The present disclosure provides a hierarchical network intrusion detection method including preprocessing normal data for training, outputting reconstruction data by inputting the preprocessed normal data for training into an autoencoder, calculating a reconstruction error by using the preprocessed normal data for training and the reconstruction data, training the autoencoder to minimize a reconstruction error, extracting hierarchical information of the autoencoder, setting a threshold value by using latent vector for the normal data for training, the reconstruction data, and an output value of each of L hidden layers included in an encoder, calculating anomaly scores of the latent vector for the network data, the reconstruction data, and an output value of each of the L hidden layers in a state in which a target network data is input to the autoencoder, and determining whether an intrusion into the network data is detected by using the threshold value and the anomaly scores.