Research on abnormal network traffic detection method based on machine learning

Aiming at the problem of high false detection rate and low detection rate of abnormal network traffic detection methods due to uneven data distribution of current network traffic datasets, a network abnormal traffic detection method based on CNN-GRU is proposed. The method firstly performs local feature learning on the data according to the local learning ability unique to the convolutional neural network (CNN), and replaces the fully connected layer with a global average pooling layer to reduce the feature dimension and parameters; secondly, it uses a gated recurrent unit (GRU) learns the time series features of the data to improve the nonlinear representation ability of the method; finally, for the imbalance between the data, the cross entropy loss function is optimized, and the penalty for abnormal class sample detection and normal class sample detection is passed. The adjustment of the weight increases the attention of the model to the abnormal samples, thereby improving the accuracy of the model detection. The simulation results show that the method can effectively improve the classification and detection performance.