Reasoning and tracing of information security events in the expressway networking system based on deep learning
Guolong Zhang, Zhiquan Ding, Jianbin Xu, Guoqing Zhong, Nan Jiang, Yuejin Zhang · International Journal of Intelligent Systems · 2022
To accurately detect and identify whether there are abnormalities in the information of the expressway networking system, an information security event reasoning and traceability method based on deep learning is proposed to build a data security protection system that includes the data life periodicity of the expressway networking system. In this system, the information security event model based on intrusion detection message exchange format is established. The model uses the information risk event reasoning method based on a deep convolution neural network to infer the risk event during data sharing of the expressway networking system, reorganize and standardize the risk event information according to the format of the information security event standardization model, and store it in the risk event database in the form of Extensible Markup Language data document. The information risk event traceability method based on the electronic fingerprint takes all risk events in the database as the target. After designing the electronic fingerprint of risk events, the original network attack tree is constructed to realize risk event traceability combined with fingerprint information. Testing indicates that the reasoning and traceability results of this method to the information security events of the expressway networking system are consistent with those in reality and our method has good usability.