Journal Article10.1016/J.JNCA.2015.11.016
A survey of network anomaly detection techniques
1.3K
TL;DR: This paper presents an in-depth analysis of four major categories of anomaly detection techniques which include classification, statistical, information theory and clustering and evaluates effectiveness of different categories of techniques.
read more
About: This article is published in Journal of Network and Computer Applications. The article was published on 01 Jan 2016. The article focuses on the topics: Intrusion detection system & Anomaly detection.
read more
Chat with Paper
AI Agents for this Paper
Find similar papers on Google Scholar, PubMed and Arxiv
Write a critical review of this paper
Analyze citations of this paper to find unaddressed research gaps
Citations
Machine learning techniques for accurate classification and detection of intrusions in computer network
Mutyalaiah Paricherla,Mahyudin Ritonga,Sandip R. Shinde,Smita M. Chaudhari,Rahmat Linur,Abhishek Raghuvanshi +5 more
TL;DR: In this paper , a combination of ant colony optimization (ACO) and the firefly approach for feature selection is proposed for intrusion detection, which is able to distinguish between normal and abnormal behaviors that are included within the dataset.
7
A DDoS Attack Detection Method Using Conditional Entropy Based on SDN Traffic
TL;DR: In this paper , the authors proposed new state determination standards that use the normal distribution characteristics of the entropy value at the time which an attack did not occur, subdivide the normal and abnormal range represented by the entropy values, improving the accuracy of attack determination.
Deep Optimal Isolation Forest with Genetic Algorithm for Anomaly Detection
Haolong Xiang,Xuyun Zhang,Mark Dras,Amin Beheshti,Wanchun Dou,Xiaolong Xu +5 more
- 01 Dec 2023
TL;DR: A deep model DOIForest is designed with two mutation schemes and solution selection, which learns the optimal isolation forest and optimises the parameters in data partitioning and can achieve better detection accuracy and robustness than the state-of-the-arts.
7
FSA-IDS: A Flow-based Self-Active Intrusion Detection System
Mehrdad Hajizadeh,Pegah Golchin +1 more
- 08 May 2023
TL;DR: In this article , a Flow-based Self-Active Intrusion Detection System (FSA-IDS) is proposed to reduce the labeling cost and realize an effective IDS, which employs a novel cluster-based sampling approach that facilitates the labeling automation process and minimizes expert involvement.
7
Explainable contextual anomaly detection using quantile regression forests
Zhong Li,Matthijs van Leeuwen +1 more
TL;DR: Explainable Contextual Anomaly Detection using Quantile Regression Forests TLDR: A novel approach to inherently interpretable contextual anomaly detection that uses quantile regression forests to model dependencies between features outperforms state-of-the-art anomaly detection methods in identifying contextual anomalies.
References
•Proceedings Article
A density-based algorithm for discovering clusters a density-based algorithm for discovering clusters in large spatial databases with noise
Martin Ester,Hans-Peter Kriegel,Jörg Sander,Xiaowei Xu +3 more
- 02 Aug 1996
TL;DR: In this paper, a density-based notion of clusters is proposed to discover clusters of arbitrary shape, which can be used for class identification in large spatial databases and is shown to be more efficient than the well-known algorithm CLAR-ANS.
20.3K
•Proceedings Article
A density-based algorithm for discovering clusters in large spatial Databases with Noise
Martin Ester,Hans-Peter Kriegel,Jörg Sander,Xiaowei Xu +3 more
- 01 Jan 1996
TL;DR: DBSCAN, a new clustering algorithm relying on a density-based notion of clusters which is designed to discover clusters of arbitrary shape, is presented which requires only one input parameter and supports the user in determining an appropriate value for it.
Data clustering: a review
TL;DR: An overview of pattern clustering methods from a statistical pattern recognition perspective is presented, with a goal of providing useful advice and references to fundamental concepts accessible to the broad community of clustering practitioners.
•Book
An Introduction to Support Vector Machines and Other Kernel-based Learning Methods
Nello Cristianini,John Shawe-Taylor +1 more
- 01 Jan 2000
TL;DR: This is the first comprehensive introduction to Support Vector Machines (SVMs), a new generation learning system based on recent advances in statistical learning theory, and will guide practitioners to updated literature, new applications, and on-line software.
15K
Anomaly detection: A survey
TL;DR: This survey tries to provide a structured and comprehensive overview of the research on anomaly detection by grouping existing techniques into different categories based on the underlying approach adopted by each technique.
Related Papers (5)
Mahbod Tavallaee,Ebrahim Bagheri,Wei Lu,Ali A. Ghorbani +3 more
- 08 Jul 2009