scholarly journals An Empirical Evaluation of Deep Learning for Network Anomaly Detection

IEEE Access ◽  
2019 ◽  
Vol 7 ◽  
pp. 140806-140817 ◽  
Author(s):  
Ritesh K. Malaiya ◽  
Donghwoon Kwon ◽  
Sang C. Suh ◽  
Hyunjoo Kim ◽  
Ikkyun Kim ◽  
...  
Keyword(s):  
Deep Learning ◽  
Anomaly Detection ◽  
Empirical Evaluation ◽  
Network Anomaly Detection

Network anomaly detection with deep learning

2018 ◽  
Author(s):  
Ugur Cekmez ◽  
Zeki Erdem ◽  
Ali Gokhan Yavuz ◽  
Ozgur Koray Sahingoz ◽  
Ali Buldu
Keyword(s):  
Deep Learning ◽  
Anomaly Detection ◽  
Network Anomaly Detection

A survey of deep learning-based network anomaly detection

2017 ◽  
Vol 22 (S1) ◽  
pp. 949-961 ◽  
Author(s):  
Donghwoon Kwon ◽  
Hyunjoo Kim ◽  
Jinoh Kim ◽  
Sang C. Suh ◽  
Ikkyun Kim ◽  
...  
Keyword(s):  
Deep Learning ◽  
Anomaly Detection ◽  
Network Anomaly Detection

scholarly journals Analysis of deep learning models for network anomaly detection in Internet of Things

2021 ◽  
pp. 28-37
Author(s):  
Diana Gaifilina ◽  
Igor Kotenko
Keyword(s):  
Neural Network ◽  
Machine Learning ◽  
Deep Learning ◽  
Internet Of Things ◽  
Anomaly Detection ◽  
Recurrent Neural Network ◽  
Network Traffic ◽  
Learning Models ◽  
Network Anomaly Detection ◽  
Machine Learning Models

Introduction: The article discusses the problem of choosing deep learning models for detecting anomalies in Internet of Things (IoT) network traffic. This problem is associated with the necessity to analyze a large number of security events in order to identify the abnormal behavior of smart devices. A powerful technology for analyzing such data is machine learning and, in particular, deep learning. Purpose: Development of recommendations for the selection of deep learning models for anomaly detection in IoT network traffic. Results: The main results of the research are comparative analysis of deep learning models, and recommendations on the use of deep learning models for anomaly detection in IoT network traffic. Multilayer perceptron, convolutional neural network, recurrent neural network, long short-term memory, gated recurrent units, and combined convolutional-recurrent neural network were considered the basic deep learning models. Additionally, the authors analyzed the following traditional machine learning models: naive Bayesian classifier, support vector machines, logistic regression, k-nearest neighbors, boosting, and random forest. The following metrics were used as indicators of anomaly detection efficiency: accuracy, precision, recall, and F-measure, as well as the time spent on training the model. The constructed models demonstrated a higher accuracy rate for anomaly detection in large heterogeneous traffic typical for IoT, as compared to conventional machine learning methods. The authors found that with an increase in the number of neural network layers, the completeness of detecting anomalous connections rises. This has a positive effect on the recognition of unknown anomalies, but increases the number of false positives. In some cases, preparing traditional machine learning models takes less time. This is due to the fact that the application of deep learning methods requires more resources and computing power. Practical relevance: The results obtained can be used to build systems for network anomaly detection in Internet of Things traffic.

scholarly journals A Deep Learning Ensemble for Network Anomaly and Cyber-Attack Detection

Sensors ◽  
2020 ◽  
Vol 20 (16) ◽  
pp. 4583 ◽  
Author(s):  
Vibekananda Dutta ◽  
Michał Choraś ◽  
Marek Pawlicki ◽  
Rafał Kozik
Keyword(s):  
Machine Learning ◽  
Deep Learning ◽  
Anomaly Detection ◽  
Statistical Significance ◽  
Attack Detection ◽  
Machine Learning Algorithms ◽  
Machine Learning Techniques ◽  
Second Phase ◽  
Network Intrusion ◽  
Network Anomaly Detection

Currently, expert systems and applied machine learning algorithms are widely used to automate network intrusion detection. In critical infrastructure applications of communication technologies, the interaction among various industrial control systems and the Internet environment intrinsic to the IoT technology makes them susceptible to cyber-attacks. Given the existence of the enormous network traffic in critical Cyber-Physical Systems (CPSs), traditional methods of machine learning implemented in network anomaly detection are inefficient. Therefore, recently developed machine learning techniques, with the emphasis on deep learning, are finding their successful implementations in the detection and classification of anomalies at both the network and host levels. This paper presents an ensemble method that leverages deep models such as the Deep Neural Network (DNN) and Long Short-Term Memory (LSTM) and a meta-classifier (i.e., logistic regression) following the principle of stacked generalization. To enhance the capabilities of the proposed approach, the method utilizes a two-step process for the apprehension of network anomalies. In the first stage, data pre-processing, a Deep Sparse AutoEncoder (DSAE) is employed for the feature engineering problem. In the second phase, a stacking ensemble learning approach is utilized for classification. The efficiency of the method disclosed in this work is tested on heterogeneous datasets, including data gathered in the IoT environment, namely IoT-23, LITNET-2020, and NetML-2020. The results of the evaluation of the proposed approach are discussed. Statistical significance is tested and compared to the state-of-the-art approaches in network anomaly detection.

Sign in / Sign up

Export Citation Format

Share Document