高级检索

    基于自适应多分辨率特征解耦的动态异构网络时间序列分类

    Adaptive Multi-Resolution Feature Decoupling for Time Series Classification in Dynamic Heterogeneous Networks

    • 摘要: 随着云边端协同计算与物联网技术的深度融合,动态异构网络中的海量终端已成为网络安全体系中的核心防护对象。这些智能终端在持续运行过程中产生网络流量、工控传感日志等多元时间序列数据,承载着终端行为的完整语义信息。因此,对此类时间序列数据进行精准分类是实现终端威胁检测的关键技术。然而,终端异质性引发的数据分布不均衡问题,使现有时序分类模型面临三重挑战:1)受限于固定分辨率的处理范式,模型难以捕捉不同时间尺度下的多粒度威胁特征;2)现有方法通常将所有分辨率特征映射至统一高维空间,忽视了不同时间分辨率在特征维度分布上的内在差异,导致噪声引入与特征冗余,制约了模型在计算资源受限的边缘终端上的部署适配能力;3)使用多分辨率进行联合推理,各分辨率分支的特征提取与融合过程带来显著的计算与存储开销,加剧了轻量化部署与高精度检测之间的固有矛盾。为了解决时间分辨率与特征维度适配的问题,提出了面向动态异构网络的自适应多分辨率表示学习(adaptive multi-resolution representation learning,AdaMRL)模型,实现了时间分辨率与特征维度的双向对齐解耦。首先,构建了多分辨率嵌套表征架构,提出多分辨率与嵌套维度自适应匹配机制,为每个时间分辨率独立配备嵌套表示学习层,自动选择最优的维度进行嵌套表示学习;其次,提出了多分辨率联合损失监督机制,在训练阶段对各分辨率表征进行同步约束,增强跨分辨率特征的鲁棒性并加快模型收敛;最后,设计了自适应维度选择与集成策略,在推理阶段为不同分辨率动态匹配最优特征维度,并通过软投票机制实现协同决策。在10个UEA多变量时间序列基准数据集与工业物联网边缘安全基准数据集Edge-IIoTset上的广泛实验表明,AdaMRL达到了当前先进的分类性能。与基准模型相比,所提方法平均分类准确率提升0.78个百分点,并在最佳自适应配置下将冗余特征参数计算量降低27.3%,在检测精度与计算效率之间实现了有效平衡,为边缘异质终端的实时安全防护提供了有力支撑。

       

      Abstract: With the deep integration of cloud-edge-end collaborative computing and IoT, the massive heterogeneous terminals in dynamic heterogeneous networks have become the core protection objects of cybersecurity systems. The multivariate time-series data generated by these intelligent terminals during continuous operation, including industrial control sensor logs and network traffic features, carry complete semantic information about terminal behavior. Accurate classification of such time-series data is a critical foundation for terminal threat detection. However, the data distribution imbalance caused by terminal heterogeneity poses three key challenges to existing time-series classification models. First, constrained by fixed-resolution processing paradigms, models struggle to capture multi-granularity threaten features across different time scales. Second, existing methods forcibly map all resolution features into a unified high-dimensional space, ignoring intrinsic differences in feature dimension distribution across time resolutions, introducing noise, feature redundancy, and limiting deployment feasibility on resource-constrained edge terminals. Third, performing joint classification with multiple resolutions at inference incurs significant time and memory overhead from the feature extraction and fusion of each resolution branch, further exacerbating the inherent tension between lightweight deployment and high-accuracy detection. To address the alignment between time resolutions and feature dimensions, we propose an adaptive multi-resolution representation learning (AdaMRL) model for dynamic heterogeneous networks, achieving bidirectional alignment and decoupling of time resolutions and feature dimensions. The core contributions of this work are as follows. First, a multi-resolution Matryoshka feature architecture is constructed, equipping each time resolution with an independent Matryoshka representation learning layer to adaptively select an appropriate dimensional subspace for representation learning. Second, a multi-resolution joint loss supervision mechanism is proposed, which applies synchronized constraints to representations at each resolution during training to enhance cross-resolution feature robustness and accelerate model convergence. Third, an adaptive dimension selection and ensemble strategy is designed, dynamically matching the optimal feature dimensionality to each resolution at inference, with collaborative decision-making via soft-voting. Extensive experiments on 10 UEA multivariate time-series benchmark datasets and the industrial IoT edge security dataset Edge-IIoTset demonstrate that AdaMRL achieves state-of-the-art classification performance. Compared with baseline models, the proposed method improves average classification accuracy by 0.78% and reduces redundant feature parameter computation by 27.3% under optimal adaptive configuration, striking an effective balance between detection accuracy and computational efficiency, and providing robust support for real-time security protection of edge heterogeneous terminals.

       

    /

    返回文章
    返回