Abstract:Computer network anomaly detection and log analysis, as an important topic in the field of network security, has been a key task to ensure network security and system reliability. First, existing network anomaly detection and log analysis methods are often challenged by high-dimensional data and complex network topologies, resulting in unstable performance and high false-positive rates. In addition, traditional methods are usually difficult to handle time-series data, which is crucial for anomaly detection and log analysis. Therefore, we need a more efficient and accurate method to cope with these problems. To compensate for the shortcomings of current methods, we propose an innovative fusion model that integrates Isolation Forest, GAN (Generative Adversarial Network), and Transformer with each other, and each of them plays a unique role. Isolation Forest is used to quickly identify anomalous data points, and GAN is used to generate synthetic data with the real data distribution characteristics to augment the training dataset, while the Transformer is used for modeling and context extraction on time series data. The synergy of these three components makes our model more accurate and robust in anomaly detection and log analysis tasks. We validate the effectiveness of this fusion model in an extensive experimental evaluation. Experimental results show that our model significantly improves the accuracy of anomaly detection while reducing the false alarm rate, which helps to detect potential network problems in advance. The model also performs well in the log analysis task and is able to quickly identify anomalous behaviors, which helps to improve the stability of the system. The significance of this study is that it introduces advanced deep learning techniques, which work anomaly detection and log analysis.

Take Package as Language: Anomaly Detection Using Transformer

LogGPT: Log Anomaly Detection via GPT

DUdetector: A Dual-Granularity Unsupervised Model for Network Anomaly Detection

The Detection of Abnormal Behavior by Artificial Intelligence Algorithms Under Network Security

Network intrusion detection based on n-gram frequency and time-aware transformer

MTC-NET: A Multi-Channel Independent Anomaly Detection Method for Network Traffic

Learning Graph Structures with Transformer for Multivariate Time Series Anomaly Detection in IoT

Towards Generic Anomaly Detection and Understanding: Large-scale Visual-linguistic Model (GPT-4V) Takes the Lead

Reinforcement Learning Meets Network Intrusion Detection: A Transferable and Adaptable Framework for Anomaly Behavior Identification

Fusion of transformer and ML-CNN-BiLSTM for network intrusion detection

A novel multi-scale network intrusion detection model with transformer

TMG-GAN: Generative Adversarial Networks-Based Imbalanced Learning for Network Intrusion Detection

ITran: A novel transformer-based approach for industrial anomaly detection and localization

Deep learning anomaly detection in AI-powered intelligent power distribution systems

UTRAD: Anomaly detection and localization with U-Transformer

Intrusion Detection Method Using Bi-Directional GPT for in-Vehicle Controller Area Networks

Multiresolution feature guidance based transformer for anomaly detection

Deep Learning-based Anomaly Detection and Log Analysis for Computer Networks

TUT: Template-Augmented U-Net Transformer for Unsupervised Anomaly Detection

Anomaly-Based Intrusion on IoT Networks Using AIGAN-a Generative Adversarial Network

BTAD: A binary transformer deep neural network model for anomaly detection in multivariate time series data