An optimized ensemble prediction model using AutoML based on soft voting classifier for network intrusion detection

Wireless sensor networks are typically characterized by large network size and sensor nodes with low energy capacity and a limited bandwidth for data transmission. Over-activity of the sensor nodes will therefore cause many issues to the network, such as an increase in the network depletion rate and poor data transmission. Data prediction methods that exploit the inter-relationship between sensor nodes can be used to reduce data traffic across wireless networks. Several related work in data prediction do not consider the time-series distribution of the sensing data. However, exploiting sequential features of the historical observations can improve prediction accuracy, and increase the number of sensing data predicted per sequence. This work propose a sequence to sequence data prediction model, using a one dimensional layer convolutional neural network to extract spatial features from the pre-processed sensing data, and an encoder-decoder model to predict the next two outputs in the sequence by exploiting the temporal distribution of the data. The aforementioned approach has the capacity of generating more accurate information, which can reduce network traffic and energy expenditure in WSNs. Furthermore, the experimental results reveals that, based on a suitable choice of nodes, our proposed model perform accurate predictions, with reduced root mean squared error as compared to related work. We also propose an approach to regulate and control the data traffic toward the base station. 

Data Prediction based encoder-decoder learning in Wireless Sensor Networks

We designed a Network Exfiltration Detection System (NEDS) to detect data exfiltration as occurring in ransomware attacks. The NEDS operates on aggregated metadata, which is more privacy-friendly and allows analysis of large volumes of high-speed network traffic. The NEDS aggregates metadata from multiple, sequential sessions between pairs of hosts in a network, which captures exfiltration by both stateful and stateless protocols. The aggregated metadata include averages per session of both packet count, request entropy, duration, and payload size, as well as the average time between sequential sessions and the amount of aggregated sessions. The NEDS applies a number of autoencoder models with unsupervised learning to detect anomalies, where each autoencoder model targets different protocols. We trained the autoencoder models with real-life data collected at network sensors in the National Detection Network as operated by the National Cyber Security Centre in the Netherlands, and configured the detection threshold by varying the false positive rate. We evaluated the detection performance by injecting exfiltration over different channels, including DNS tunnels and uploads to FTP servers, web servers, and cloud storage. Our experimental results show that aggregation significantly increases detection performance of exfiltration that happens over longer time, most notably, DNS tunnels. Our NEDS can be applied to detect exfiltration either in near-real-time data analysis with limited false positive rates, or in captured data to aid in post-incident analysis.

Data Exfiltration Detection on Network Metadata with Autoencoders

Network anomaly detection solutions can analyze a network’s data volume by protocol over time and can detect many kinds of cyberattacks such as exfiltration. We use exponential random graph models (ERGMs) in order to flatten hourly network topological characteristics into a time series, and Autoregressive Moving Average (ARMA) to analyze that time series and to detect potential attacks. In particular, we extend our previous method in not only demonstrating detection over hourly data but also through labeling of nodes and over the HTTP protocol. We demonstrate the effectiveness of our method using real-world data for creating exfiltration scenarios. We highlight how our method has the potential to provide a useful description of what is happening in the network structure and how this can assist cybersecurity analysts in making better decisions in conjunction with existing intrusion detection systems. Finally, we describe some strengths of our method, its accuracy based on the right selection of parameters, as well as its low computational requirements. 

Hourly Network Anomaly Detection on HTTP Using Exponential Random Graph Models and Autoregressive Moving Average

Wireless sensor networks are typically characterized by large network size and sensor nodes with low energy capacity and a limited bandwidth for data transmission. Over-activity of the sensor nodes will therefore cause many issues to the network, such as an increase in the network depletion rate and poor data transmission. Data prediction methods that exploit the inter-relationship between sensor nodes can be used to reduce data traffic across wireless networks. Several related work in data prediction do not consider the time-series distribution of the sensing data. However, exploiting sequential features of the historical observations can improve prediction accuracy, and increase the number of sensing data predicted per sequence. This work propose a sequence to sequence data prediction model, using a one dimensional layer convolutional neural network to extract spatial features from the pre-processed sensing data, and an encoder-decoder model to predict the next two outputs in the sequence by exploiting the temporal distribution of the data. The aforementioned approach has the capacity of generating more accurate information, which can reduce network traffic and energy expenditure in WSNs. Furthermore, the experimental results reveals that, based on a suitable choice of nodes, our proposed model perform accurate predictions, with reduced root mean squared error as compared to related work. We also propose an approach to regulate and control the data traffic toward the base station.

https://ieeexplore.ieee.org/ielx7/6287639/6514899/09915570.pdf

Data Prediction Based Encoder-Decoder Learning in Wireless Sensor Networks

Network anomaly detection solutions are being used as defense against several attacks, especially those related to data exfiltration. Several methods exist in the literature, such as clustering or neural networks. However, these methods often focus on local and global network indicators instead of network structural properties, such as understanding which devices typically communicate with other devices. To address this literature gap, we propose a method that uses exponential random graph modeling to integrate network topology structure statistics in anomaly detection. We demonstrate the effectiveness of our method using real-world examples as a baseline for experiments on domain name system (DNS) data exfiltration scenarios. We highlight how our method provides better insight into how network traffic may alter network graph structure and how this can assist cybersecurity analysts in making better decisions in conjunction with existing intrusion detection systems. Finally, we compare and contrast the accuracy, false positive rate and computational overhead of our method with other methods.

/pdf/network-anomaly-detection-using-exponential-random-graph-7kzqmfhbmt.pdf

Network Anomaly Detection Using Exponential Random Graph Models and Autoregressive Moving Average

Handle everyday research tasks with reliable, citation-backed results

Your personal Research Agent to handle research tasks with citation-backed results

Popular Tasks used by Researchers

How can I help with your research?

Meet SciSpace

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Scott Waldron

Author Tools

Chat about Author

Papers

Network Anomaly Detection Using Exponential Random Graph Models and Autoregressive Moving Average