《電子技術(shù)應(yīng)用》
您所在的位置:首頁 > 通信与网络 > 设计应用 > 基于深度学习的物联网入侵检测系统综述
基于深度学习的物联网入侵检测系统综述
网络安全与数据治理
周品希,沈岳,李伟
湖南农业大学信息与智能科学技术学院
摘要: 物联网中智能设备的互联互通在推动社会进步的同时,也因设备异构性、协议多样性和资源受限性导致安全威胁日益复杂化。传统入侵检测系统依赖特征匹配和规则定义,在面对新型攻击和动态攻击模式时表现出局限性。系统梳理了深度学习技术在物联网入侵检测系统中的应用进展,通过对比分析发现:基于深度学习的模型在检测精度和实时性上优于传统方法,在处理空间特征、捕捉时序依赖等方面表现突出;无监督学习和集成方法通过生成对抗样本、融合多模型优势,有效提升了小样本场景下的检测鲁棒性;当前研究仍面临数据标注成本高、边缘计算资源受限、动态攻击适应性不足等挑战。总结探讨了未来研究应聚焦轻量化、跨模态数据融合等方向,为构建高效、自适应的物联网安全防护体系提供理论支撑。
中圖分類號(hào):TP393.08文獻(xiàn)標(biāo)識(shí)碼:ADOI:10.19358/j.issn.2097-1788.2025.06.001
引用格式:周品希,沈岳,李偉. 基于深度學(xué)習(xí)的物聯(lián)網(wǎng)入侵檢測(cè)系統(tǒng)綜述[J].網(wǎng)絡(luò)安全與數(shù)據(jù)治理,2025,44(6):1-10.
A review of IoT intrusion detection systems based on deep learning
Zhou Pinxi,Shen Yue,Li Wei
College of Information and Intelligence, Hunan Agricultural University
Abstract: While the interconnection of smart devices in the Internet of Things promotes social progress, it also leads to increasingly complex security threats due to device heterogeneity, protocol diversity and resource constraints. Traditional intrusion detection systems rely on feature matching and rule definition, and show limitations when facing new attacks and dynamic attack patterns. This paper systematically sorts out the application progress of deep learning technology in the intrusion detection system of the Internet of Things. Through comparative analysis, it is found that the model based on deep learning is superior to traditional methods in detection accuracy and real-time performance, and has outstanding performance in processing spatial features and capturing temporal dependencies. Unsupervised learning and integration methods effectively improve the detection robustness in small sample scenarios by generating adversarial samples and integrating the advantages of multiple models. Current research still faces challenges such as high data annotation costs, limited edge computing resources, and insufficient adaptability to dynamic attacks. This paper summarizes and discusses the directions that future research should focus on, such as lightweight and cross-modal data fusion, to provide theoretical support for building an efficient and adaptive Internet of Things security protection system.
Key words : network security; Internet of Things; intrusion detection; deep learning

引言

物聯(lián)網(wǎng)(Internet of Things, IoT)的快速發(fā)展正深刻地改變著人們的生活方式和社會(huì)的運(yùn)行模式。目前,物聯(lián)網(wǎng)應(yīng)用已經(jīng)覆蓋了智能家居、醫(yī)療健康、工業(yè)控制、智慧農(nóng)業(yè)等各個(gè)領(lǐng)域。然而,物聯(lián)網(wǎng)設(shè)備的廣泛部署和互聯(lián)互通也帶來了嚴(yán)重的安全隱患。由于物聯(lián)網(wǎng)設(shè)備資源受限、異構(gòu)性強(qiáng)、通信協(xié)議多樣等原因,以往的網(wǎng)絡(luò)安全防護(hù)手段難以適應(yīng)這一復(fù)雜的環(huán)境,導(dǎo)致物聯(lián)網(wǎng)系統(tǒng)頻繁成為網(wǎng)絡(luò)攻擊的目標(biāo),嚴(yán)重威脅著個(gè)人隱私、企業(yè)利益及國家安全[1-2]。

入侵檢測(cè)系統(tǒng)(Intrusion Detection System, IDS)憑借其能夠?qū)崟r(shí)監(jiān)控網(wǎng)絡(luò)流量,檢測(cè)并響應(yīng)異常行為,被廣泛應(yīng)用于物聯(lián)網(wǎng)安全領(lǐng)域中。早期的IDS主要依賴于特征匹配[3]和規(guī)則定義[4],然而隨著網(wǎng)絡(luò)規(guī)模的大幅擴(kuò)張以及網(wǎng)絡(luò)處理節(jié)點(diǎn)數(shù)量的激增,重要數(shù)據(jù)在不同的網(wǎng)絡(luò)節(jié)點(diǎn)之間生成和共享,同時(shí)舊攻擊發(fā)生突變或產(chǎn)生大量新型攻擊,數(shù)據(jù)傳輸量的劇增和攻擊方式的多變使其檢測(cè)效果滿足不了當(dāng)前需求。

近年來,隨著深度學(xué)習(xí)在眾多領(lǐng)域的廣泛應(yīng)用,研究人員探索了多種深度學(xué)習(xí)模型,以應(yīng)對(duì)物聯(lián)網(wǎng)環(huán)境中復(fù)雜多變的安全威脅。在物聯(lián)網(wǎng)入侵檢測(cè)中,深度學(xué)習(xí)可以從大量的網(wǎng)絡(luò)流量和設(shè)備行為中挖掘隱蔽的模式,自動(dòng)學(xué)習(xí)攻擊特征,減少對(duì)人工規(guī)則的依賴。


本文詳細(xì)內(nèi)容請(qǐng)下載:

http://ihrv.cn/resource/share/2000006574


作者信息:

周品希,沈岳,李偉

(湖南農(nóng)業(yè)大學(xué)信息與智能科學(xué)技術(shù)學(xué)院,湖南長沙410000) 


Magazine.Subscription.jpg

此內(nèi)容為AET網(wǎng)站原創(chuàng),未經(jīng)授權(quán)禁止轉(zhuǎn)載。

相關(guān)內(nèi)容