Spatiotemporal Feature Correlation with Feature Space Transformation for Intrusion Detection

In recent years, with the continuous development of information technology, network security issues have become increasingly prominent. Intrusion detection has garnered significant attention in the field of network security protection due to its ability to detect anomalies in a timely manner. However, existing intrusion detection methods often fail to effectively capture spatiotemporal correlations in traffic and struggle with imbalanced, high-dimensional feature spaces—problems that become even more pronounced under complex network environments—ultimately leading to low identification accuracy and high false-positive rates. To address these challenges, this paper proposes a spatiotemporal correlation-based intrusion detection method that utilizes feature space transformation and Euclidean distance. Specifically, the method first considers the relationship between the characteristics of different operating systems and attack behaviors through feature space transformation and integration. Then, it constructs a graph structure between samples using Euclidean distance and captures the spatiotemporal correlations between samples by combining graph convolutional networks with bidirectional gated recurrent unit networks. Through this design, the model can deeply mine the spatial and temporal features of network traffic, thereby improving classification accuracy and detection efficiency for network attacks. Experimental results show that the proposed model significantly outperforms existing intrusion detection approaches across multiple evaluation metrics, including accuracy, weighted precision, weighted recall, and weighted F1 score.