Network anomaly detection using deep learning techniques

CAAI Transactions on Intelligence Technology

article

Mohammad Kazim Hooshmand¹  Doreswamy Hosahalli¹ 

[1] Department of Computer Science, Mangalore University

关键词: artificial intelligence;    convolution;    neural network;    security;    telecommunication traffic;    computer vision;    feedforward neural nets;    cellular neural nets;    transport protocols;    neural nets;    learning (artificial intelligence);   

DOI  :  10.1049/cit2.12078

学科分类：数学（综合）

来源: Wiley

【 摘 要 】

Convolutional neural networks (CNNs) are the specific architecture of feed-forward artificial neural networks. It is the de-facto standard for various operations in machine learning and computer vision. To transform this performance towards the task of network anomaly detection in cyber-security, this study proposes a model using one-dimensional CNN architecture. The authors' approach divides network traffic data into transmission control protocol (TCP), user datagram protocol (UDP), and OTHER protocol categories in the first phase, then each category is treated independently. Before training the model, feature selection is performed using the Chi-square technique, and then, over-sampling is conducted using the synthetic minority over-sampling technique to tackle a class imbalance problem. The authors' method yields the weighted average f -score 0.85, 0.97, 0.86, and 0.78 for TCP, UDP, OTHER, and ALL categories, respectively. The model is tested on the UNSW-NB15 dataset.

【 授权许可】

CC BY|CC BY-ND|CC BY-NC|CC BY-NC-ND