吉林大学学报(理学版) ›› 2026, Vol. 64 ›› Issue (5): 1107-1118.

• • 上一篇    下一篇

一种融合联邦学习的混合神经网络入侵检测模型

刘丹阳, 韩斌, 王娟   

  1. 成都信息工程大学 网络空间安全学院(芯谷产业学院), 成都 610225
  • 收稿日期:2025-05-16 出版日期:2026-09-26 发布日期:2026-09-26
  • 通讯作者: 韩斌 E-mail:hanbin@cuit.edu.cn

A Hybrid Neural Network Intrusion Detection Model Integrating Federated Learning

Liu Danyang, Han Bin, Wang Juan   

  1. School of Cybersecurity (Xingu Industrial College), Chengdu University of Information Technology, Chengdu 610225, China
  • Received:2025-05-16 Online:2026-09-26 Published:2026-09-26

摘要: 针对网络入侵检测在分布式环境下隐私保护与识别精度难以兼顾的问题, 提出一种融合联邦学习架构的混合神经网络模型. 该模型通过整合残差结构、 门控循环单元和通道注意力机制, 解决了流量时序特征挖掘不深和权重感知不足的问题; 同时利用合成少数类过采样技术和标签平滑交叉熵损失算法, 有效克服了由于节点数据分布异构而导致的模型性能退化难题. 在数据集CICIDS2017上的实验结果表明, 该模型在准确率、 精确率、 召回率等核心指标上均达约99.80%, 性能显著优于现有的联邦学习及经典检测算法. 该结果证明了在不共享原始敏感数据的前提下实现超高精度协同防御的可行性, 不仅有效缓解了网络安全领域的数据孤岛难题, 也为构建隐私保护型智能化防御体系提供了可靠的技术依据.

关键词: 入侵检测, 联邦学习, 通道注意力机制, 门控循环单元, 残差网络

Abstract: Addressing the challenge that privacy protection and recognition accuracy are difficult to balance in distributed environments for network intrusion detection, this paper proposes a hybrid neural network model integrating a federated learning architecture. By integrating residual structures, gated recurrent units, and the squeeze-and-excitation channel attention mechanism, the model addresses the problems of insufficient temporal feature mining and lack of weight perception in network traffic. Meanwhile, the synthetic minority over-sampling technique and the label smoothing cross-entropy loss algorithm are utilized to effectively overcome the problem of model performance degradation caused by heterogeneous data distribution across nodes. Experimental results on the CICIDS2017 dataset demonstrate that the model achieves 99.80% in key metrics such as accuracy, precision, and recall, significantly outperforming existing federated learning and classical detection algorithms. These results validate the feasibility of achieving ultra-high precision collaborative defense without sharing raw sensitive data, which not only effectively alleviates the data island dilemma in the field of network security but also provides a reliable technical basis for constructing privacy-preserving intelligent defense systems.

Key words:  , intrusion detection, federated learning, channel attention mechanism, gated recurrent unit, residual network

中图分类号: 

  • TP393.08