Midbrain-to-pons ratio in autopsy-confirmed progressive supranuclear palsy: replication in an independent cohort

V. Kaasinen,Noora Kangassalo,M. Gardberg,Juuso Isotalo,J. Karhu,R. Parkkola,P. Sonninen

DOI: https://doi.org/10.1007/s10072-015-2184-3

2015-03-25

Neurological Sciences

Abstract:

What problem does this paper attempt to address?

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

Lu Chen,Tao Zhang,Yuanyuan Ma,Mu Chen

DOI: https://doi.org/10.1109/iist62526.2024.00098

2024-01-01

Abstract:With the increasing complexity, automation, and intelligence of network attacks, new types of attacks are constantly emerging in the network, posing great challenges to network attack detection and timely response based on prior rules. In order to more effectively and accurately identify abnormal traffic, a network abnormal traffic detection algorithm based on improved convolutional neural networks is proposed. The algorithm first inputs the key features of traffic anomaly monitoring, converts them into color images through visualization technology, extracts higher dimensional features, and then uses neural structure search technology to find a lightweight convolutional network structure with high accuracy and less time consumption. The optimal model is used to output the type of traffic anomaly. The results indicate that the algorithm has a higher accuracy and the shortest classification time for a single image.
The Detection of Abnormal Behavior by Artificial Intelligence Algorithms Under Network Security

Hui Cao

DOI: https://doi.org/10.1109/ACCESS.2024.3436541

IF: 3.9

IEEE Access

Abstract:With the continuous evolution of network attack methods, traditional rule-based and signature-based security strategies are becoming increasingly hard to deal with increasingly complex network threats. The research focuses on the problem of network traffic anomaly detection in network security, and proposes an improved Transformer and Generative Adversarial Networks network traffic anomaly detection model. The innovation lies in utilizing the Patch segmentation in the Transformer module to reduce information loss, while introducing random masked data blocks to enhance the anti-interference ability of Generative Adversarial Networks, and proposing a class balance model. Therefore, a Transformer Multi Receive Field Fusion (Trans-M) model for network traffic anomaly detection is constructed. The performance test results showed that after category balancing, the accuracy, recall, and F1-score of each model were been significantly improved. The accuracy of the Trans-M model on the balanced dataset arrived 98.12%, an improvement of 8.59% compared to before balancing. The recall rate of the Trans-M model was improved by 8.62% to 97.86%. On Balanced F Score (F1-score), the highest score of the Trans-M model was 98.46%, which was 8.18% higher than before balancing. The experiment outcomes demonstrate that the raised network traffic anomaly detection system is superior to common anomaly traffic detection models and can meet the actual network security protection needs.

Computer Science,Engineering
DMU-TransNet: Dense multi-scale U-shape transformer network for anomaly detection

Wei Zhou,Shihui Wu,Yingyuan Wang,Lina Zuo,Yugen Yi,Wei Cui

DOI: https://doi.org/10.1016/j.measurement.2024.114216

IF: 5.6

2024-01-01

Measurement

Abstract:Anomaly detection is crucial in medical and industrial sectors. Despite the promising results of Convolutional Neural Networks (CNNs), existing approaches often focus predominantly on local visual features, neglecting global and multi-scale features. This limitation leads to unstable training and suboptimal detection performance. To address these challenges, this paper introduces a novel anomaly detection model, named DMU-TransNet. Firstly, the Convolution with Transformer (ConvTR) module is designed to enlarge the receptive field and enhance the model's global dependence. Secondly, the Dense Multi-scale Skip Connection (DMSC) module amalgamates multi-scale features from various layers, enabling the model to comprehend local details and global context simultaneously, while mitigating the vanishing gradients problem. Finally, the Multi-level Fusion (MF) module merges multi-scale features from multi-level decoders, minimizing information loss and enabling effective capture of diverse information. Extensive experimental results confirm that our method achieves optimal performance on several mainstream datasets. Our code is available at https://github.com/ml-AD/DMU-TransNet.

engineering, multidisciplinary,instruments & instrumentation
Attention Based CNN-LSTM Network for Anomaly Pattern Classification of Multivariate Time Series

Xianbo Zhang,Chao Wang,Jing Zhang,Feng Lin,Zezhou Li

DOI: https://doi.org/10.1109/ddcls55054.2022.9858500

2022-01-01

Abstract:The multivariate time series (MTS) is observed in various fields nowadays so as to monitor the operating status of equipment like server machines, satellites, engines, etc. Tasks like anomaly detection and anomaly pattern classification of MTS, accordingly, are of great importance to fault warning and system stability. Data-driven methods are increasingly becoming prevailing regarding these problems with a huge amount of input information. In this paper, we propose a new architecture where MTS is processed as images and fed into an attention-based CNN-LSTM network (AC-LSTM). CNN-LSTM network is responsible for extracting both spatial and temporal features among and within each dimension of MTS, while the modified attention mechanism helps promote reasonable weight allocations without the introduction of additional parameters. The proposed model firstly gives the result of anomaly detection and makes a further decision on anomaly classifications if the input is detected as an abnormal one. With the modified attention mechanism and the cooperation of CNN and LSTM, experiments on both public datasets and the operation data collected from real-world applications prove the effectiveness and promotion of the proposed model.
WT-CFormer: High-Performance Web Traffic Anomaly Detection Using CNN and Transformer Networks

Yundi He,Runhua Shi

2024-10-14

Abstract:Web traffic (WT) refers to time-series data that captures the volume of data transmitted to and from a web server during a user's visit to a website. Anomalies in web traffic signal unusual fluctuations in this data, making their detection crucial for ensuring network security. Deep neural network approaches for web traffic anomaly detection have achieved cutting-edge classification performance. However, since these methods are still insufficient in terms of classification effectiveness and speed, researching fast and accurate anomaly detection methods is a challenging problem. In this paper, we propose a novel anomaly detection model (WT-CFormer) specifically designed for web traffic, which innovatively use the Transformer to efficiently and accurately extract the temporal features of web traffic and deeply integrates the CNN to extract the spatial features of web traffic to improve the anomaly detection performance. In addition, we conduct a large number of experiments to prove the effectiveness and superiority of WT-CFormer for web traffic anomaly detection. In evaluation experiments, WT-CFormer has the highest performance, obtaining a recall as high as 96.79%, a precision of 97.35%, an F1 score of 97.07%, and an accuracy of 99.43%, which is 7.09%,1.15%, 4.77%, and 0.83% better than the state-of-the-art method, followed by C-LSTM, CTGA, random forest, and KNN algorithms. In addition, we find that the classification performance of WT-CFormer with only 50 training epochs outperforms C-LSTM with 500 training epochs, which greatly improves the convergence performance. Finally, we perform ablation experiments to demonstrate the necessity of each component within WT-CFormer.

Networking and Internet Architecture
Learning Multi-Pattern Normalities in the Frequency Domain for Efficient Time Series Anomaly Detection

Feiyi Chen,Yingying zhang,Zhen Qin,Lunting Fan,Renhe Jiang,Yuxuan Liang,Qingsong Wen,Shuiguang Deng

DOI: https://doi.org/10.1109/icde60146.2024.00047

2024-01-01

Abstract:Anomaly detection significantly enhances the robustness of cloud systems.While neural network-based methods have recently demonstrated strongadvantages, they encounter practical challenges in cloud environments: thecontradiction between the impracticality of maintaining a unique model for eachservice and the limited ability to deal with diverse normal patterns by aunified model, as well as issues with handling heavy traffic in real time andshort-term anomaly detection sensitivity. Thus, we propose MACE, a multi-normal-pattern accommodated and efficientanomaly detection method in the frequency domain for time series anomalydetection. There are three novel characteristics of it: (i) a patternextraction mechanism excelling at handling diverse normal patterns with aunified model, which enables the model to identify anomalies by examining thecorrelation between the data sample and its service normal pattern, instead ofsolely focusing on the data sample itself; (ii) a dualistic convolutionmechanism that amplifies short-term anomalies in the time domain and hindersthe reconstruction of anomalies in the frequency domain, which enlarges thereconstruction error disparity between anomaly and normality and facilitatesanomaly detection; (iii) leveraging the sparsity and parallelism of frequencydomain to enhance model efficiency. We theoretically and experimentally provethat using a strategically selected subset of Fourier bases can not only reducecomputational overhead but is also profitable to distinguish anomalies,compared to using the complete spectrum. Moreover, extensive experimentsdemonstrate MACE's effectiveness in handling diverse normal patterns with aunified model and it achieves state-of-the-art performance with highefficiency.
MSCA: an Unsupervised Anomaly Detection System for Network Security in Backbone Network.

Yating Liu,Yuantao Gu,Xinyue Shen,Qingmin Liao,Quan Yu

DOI: https://doi.org/10.1109/tnse.2022.3206353

IF: 6.6

2023-01-01

IEEE Transactions on Network Science and Engineering

Abstract:Anomaly detection is a crucial topic in network security which refers to automatically mining known and unknown attacks or threats. Many detectors have been proposed in the last decade. Nonetheless, a practical solution, which is able to provide a high True Positive Rate (TPR) with an acceptable False Positive Rate (FPR) without any prior information, is still challenging due to the complexity and variability of anomaly pattern. In this article, we propose a novel unsupervised detection system called MSCA which applies multiple sketches, K-means++ unsupervised clustering, and association rule mining to detect traffic anomalies and analyze anomalous features and correlations. It can blindly identify known and unknown traffic anomalies without any labeled traffic or prior signatures about data distribution. Rich traffic data is first aggregated and compacted to traffic flows by sketches, and further detected by the combination of clustering algorithm and voting strategy. Then association rule mining is finally utilized to find the anomalous frequent item-sets and association rules. Numerical experiments on MAWILAB datasets demonstrate that the proposed detection method outperforms other reference unsupervised detection methods. It achieves an accuracy of 99.86%, 99.97%, 97.08%, and 95.19% in overall four detection types including IP and port of source and destination.
CANet: Convolutional Attention-based Network for Multivariate Time Series Anomaly Detection

Xianbo Zhang,Jing Zhang,Chao Wang,Feng Lin,Zezhou Li

DOI: https://doi.org/10.1109/icsp54964.2022.9778305

2022-01-01

Abstract:Anomaly detection of multivariate time series has been an active research topic for decades owing to the broad application of time series in various fields including e-commerce, smart city, robotic systems, etc. Accurate detection is therefore of great importance to the operational stability of a system or corporation. In this paper, we propose a new model composed of convolutional neural networks and a modified attention mechanism. Snapshot pictures of multivariate time series are adopted as the input for convolutional process. Convolutional blocks are responsible for spatial information extraction. And the modified attention mechanism can well assign weights to input segments since this mechanism emphasizes important sequences while depressing irrelevant segments. The comparison work with multiple baselines is carried out on datasets collected from the public archive and real world. Experimental results of multiple evaluation metrics prove that our model not only obtains higher accuracy but also gains a better recall rate.
MFVT: an anomaly traffic detection method merging feature fusion network and vision transformer architecture

Ming Li,Dezhi Han,Dun Li,Han Liu,Chin-Chen Chang

DOI: https://doi.org/10.1186/s13638-022-02103-9

2022-04-25

EURASIP Journal on Wireless Communications and Networking

Abstract:Abstract Network intrusion detection, which takes the extraction and analysis of network traffic features as the main method, plays a vital role in network security protection. The current network traffic feature extraction and analysis for network intrusion detection mostly uses deep learning algorithms. Currently, deep learning requires a lot of training resources and has weak processing capabilities for imbalanced datasets. In this paper, a deep learning model (MFVT) based on feature fusion network and vision transformer architecture is proposed, which improves the processing ability of imbalanced datasets and reduces the sample data resources needed for training. Besides, to improve the traditional raw traffic features extraction methods, a new raw traffic features extraction method (CRP) is proposed, and the CPR uses PCA algorithm to reduce all the processed digital traffic features to the specified dimension. On the IDS 2017 dataset and the IDS 2012 dataset, the ablation experiments show that the performance of the proposed MFVT model is significantly better than other network intrusion detection models, and the detection accuracy can reach the state-of-the-art level. And, when MFVT model is combined with CRP algorithm, the detection accuracy is further improved to 99.99%.

telecommunications,engineering, electrical & electronic
DTAAD: Dual Tcn-attention networks for anomaly detection in multivariate time series data

Ling-rui Yu,Qiu-hong Lu,Yang Xue

DOI: https://doi.org/10.1016/j.knosys.2024.111849

IF: 8.139

2024-04-26

Knowledge-Based Systems

Abstract:Anomaly detection techniques enable effective anomaly detection and diagnosis in multi-variate time series data, which are of major significance for today's industrial applications. However, establishing an anomaly detection system that can be rapidly and accurately located is a challenging problem due to the lack of anomaly labels, the high dimensional complexity of the data, memory bottlenecks in actual hardware, and the need for fast reasoning. In this paper, we propose an anomaly detection and diagnosis model, DTAAD, based on Transformer and Dual Temporal Convolutional Network (TCN). Our overall model is an integrated design in which an autoregressive model (AR) combines with an autoencoder (AE) structure. Scaling methods and feedback mechanisms are introduced to improve prediction accuracy and expand correlation differences. Constructed by us, the Dual TCN-Attention Network (DTA) uses only a single layer of Transformer encoder in our baseline experiment, belonging to an ultra-lightweight model. Our extensive experiments on seven public datasets validate that DTAAD exceeds the majority of currently advanced baseline methods in both detection and diagnostic performance. Specifically, DTAAD improved F1 scores by 8.38% and reduced training time by 99% compared to the baseline. The code and training scripts are publicly available on GitHub at https://github.com/Yu-Lingrui/DTAAD .

computer science, artificial intelligence
TTSAD:TCN-Transformer-SVDD Model for Anomaly Detection in Air Traffic ADS-B Data

Peng Luo,Buhong Wang,Jiwei Tian

DOI: https://doi.org/10.1016/j.cose.2024.103840

IF: 5.105

2024-03-01

Computers & Security

Abstract:ADS-B (Automatic Dependent Surveillance-Broadcast) is a key technology in the new generation air traffic surveillance system. However, it is vulnerable to various cyber attacks because it broadcasts data in plaintext format and lacks authentication mechanism. Previous research has rarely considered the application scenarios of ATM (Air Traffic Management) in commercial air transport, and there are the problems of low anomaly detection rate and the non-lightweight model. This paper focuses on ADS-B anomaly detection under the background of ATM. We propose the TTSAD (TCN-Transformer-SVDD Model for Anomaly Detection) model, which aims to address the problems of existing ADS-B anomaly detection methods including inadequate considerations of long-term dependencies and distribution characteristic, the non-lightweight model and the poor adaptive threshold. First, ADS-B time series is input into TCN (Temporal Convolutional Network) prediction module which predicts data in an accurate and quick way using causal convolution and dilated convolution. Then, the predicted ADS-B time series is input into Transformer reconstruction module which reconstructs data accurately and quickly based on Self-Attention and Multi-Head Attention mechanism. Finally, the difference values between the reconstructed values and the real values are input into SVDD (Support Vector Data Description) threshold determination module for an optimal threshold. Experimental results show that the TTSAD model can detect ADS-B anomaly data generated from attacks such as altitude slow offset and DOS (Denial of Service). The TTSAD model is superior to other machine learning methods in terms of recall rate, detection rate, accuracy rate, missing detection rate and false alarm rate. Furthermore, compared with other deep learning methods including LSTM, GRU and LSTM-AE, the TTSAD model has a shorter training time and a lightweight characteristic. This approach guarantees the information security of ADS-B, thereby improving the operational security of ATM.

computer science, information systems
A Multi-Modal Approach For Context-Aware Network Traffic Classification

Yechen Wang,Siqi Shen,Siyuan Ren,Qingyun Liao,Yan Jia,Bo Pang,Yongquan Fu

DOI: https://doi.org/10.1109/ICASSP49357.2023.10095124

2023-06-04

Abstract:Network traffic classification is important for network security and management. State-of-the-art classifiers use deep learning techniques to automatically extract feature vectors from the traffic, which however lose important context of the communication sessions and encapsulated text semantics. In this paper, we present a Multi-Modal Classification method named MTCM to systematically exploit the context for the classification task. We build an adaptive context-aware feature extraction framework over varying-length and dynamic packet sequences, based on the attention-aware graph neural networks and BERT. We next automatically fusion multimodal features with the Multi-Layer Perception (MLP) that unifies the graph and semantic features for the packet stream. Extensive evaluation with real-world application and abnormal network datasets show that MTCM outperforms state- of-the-art deep learning methods, and is robust for different classes of traffic data sets.

Computer Science
A novel multi-scale network intrusion detection model with transformer

Chiming Xi,Hui Wang,Xubin Wang

DOI: https://doi.org/10.1038/s41598-024-74214-w

IF: 4.6

2024-10-07

Scientific Reports

Abstract:Network is an essential tool today, and the Intrusion Detection System (IDS) can ensure the safe operation. However, with the explosive growth of data, current methods are increasingly struggling as they often detect based on a single scale, leading to the oversight of potential features in the extensive traffic data, which may result in degraded performance. In this work, we propose a novel detection model utilizing multi-scale transformer namely IDS-MTran. In essence, the collaboration of multi-scale traffic features broads the pattern coverage of intrusion detection. Firstly, we employ convolution operators with various kernels to generate multi-scale features. Secondly, to enhance the representation of features and the interaction between branches, we propose Patching with Pooling (PwP) to serve as a bridge. Next, we design multi-scale transformer-based backbone to model the features at diverse scales, extracting potential intrusion trails. Finally, to fully capitalize these multi-scale branches, we propose the Cross Feature Enrichment (CFE) to integrate and enrich features, and then output the results. Sufficient experiments show that compared with other models, the proposed method can distinguish different attack types more effectively. Specifically, the accuracy on three common datasets NSL-KDD, CIC-DDoS 2019 and UNSW-NB15 has all exceeded 99%, which is more accurate and stable.

multidisciplinary sciences
A Network Traffic anomaly Detection method based on CNN and XGBoost

Xisong Chen,Kaihong Yan,Tao Fu,Jin Zhang,D. Niu,Li Wang

DOI: https://doi.org/10.1109/CAC51589.2020.9327030

2020-11-06

Abstract:With the rapid development of information network, network security is becoming more and more important. Intrusion detection is an important component of the network security system. The traditional signature-based matching detection method is difficult to cope with the increasingly complex network environment. On the contrary, anomaly detection which is based on network traffic pattern analysis has obvious advantages in dealing with encryption attacks, zero-day attacks and other new attacks. This paper studies the network traffic anomaly detection, and proposes a traffic anomaly detection model which combines convolution neural network and eXtreme Gradient Boosting algorithm. First, the collected traffic data is preprocessed into appropriate format that meets the input requirements of the model. Then the improved LeNet-5 convolution neural network is used for feature learning, and finally XGBoost algorithm is used to classify the learning features. Experimental results show that the proposed network traffic anomaly detection method based on CNN and XGBoost has a high accuracy, and good experimental results have been achieved in both two- classification and multi-classification.

Computer Science
Network Traffic Anomaly Detection Method Based on Multi scale Residual Feature

Xueyuan Duan,Yu Fu,Kun Wang

DOI: https://doi.org/10.48550/arXiv.2205.03907

2022-05-08

Networking and Internet Architecture

Abstract:To address the problem that traditional network traffic anomaly detection algorithms do not suffi-ciently mine potential features in long time domain, an anomaly detection method based on mul-ti-scale residual features of network traffic is proposed. The original traffic is divided into subse-quences of different time spans using sliding windows, and each subsequence is decomposed and reconstructed into data sequences of different levels using wavelet transform technique; the stacked autoencoder (SAE) constructs similar feature space using normal network traffic, and gen-erates reconstructed error vector using the difference between reconstructed samples and input samples in the similar feature space; the multi-path residual group is used to learn reconstructed error The traffic classification is completed by a lightweight classifier. The experimental results show that the detection performance of the proposed method for anomalous network traffic is sig-nificantly improved compared with traditional methods; it confirms that the longer time span and more S transformation scales have positive effects on discovering potential diversity information in the original network traffic.
DDMT: Denoising Diffusion Mask Transformer Models for Multivariate Time Series Anomaly Detection

Chaocheng Yang,Tingyin Wang,Xuanhui Yan

2023-10-30

Abstract:Anomaly detection in multivariate time series has emerged as a crucial challenge in time series research, with significant research implications in various fields such as fraud detection, fault diagnosis, and system state estimation. Reconstruction-based models have shown promising potential in recent years for detecting anomalies in time series data. However, due to the rapid increase in data scale and dimensionality, the issues of noise and Weak Identity Mapping (WIM) during time series reconstruction have become increasingly pronounced. To address this, we introduce a novel Adaptive Dynamic Neighbor Mask (ADNM) mechanism and integrate it with the Transformer and Denoising Diffusion Model, creating a new framework for multivariate time series anomaly detection, named Denoising Diffusion Mask Transformer (DDMT). The ADNM module is introduced to mitigate information leakage between input and output features during data reconstruction, thereby alleviating the problem of WIM during reconstruction. The Denoising Diffusion Transformer (DDT) employs the Transformer as an internal neural network structure for Denoising Diffusion Model. It learns the stepwise generation process of time series data to model the probability distribution of the data, capturing normal data patterns and progressively restoring time series data by removing noise, resulting in a clear recovery of anomalies. To the best of our knowledge, this is the first model that combines Denoising Diffusion Model and the Transformer for multivariate time series anomaly detection. Experimental evaluations were conducted on five publicly available multivariate time series anomaly detection datasets. The results demonstrate that the model effectively identifies anomalies in time series data, achieving state-of-the-art performance in anomaly detection.

Machine Learning,Artificial Intelligence
Abnormal Traffic Detection for Internet of Things Based on an Improved Residual Network

Tingting Su,Jia Wang,Wei Hu,Gaoqiang Dong,Jeon Gwanggil

DOI: https://doi.org/10.32604/cmc.2024.051535

2024-01-01

Abstract:Along with the progression of Internet of Things (IoT) technology, network terminals are becoming continuously more intelligent. IoT has been widely applied in various scenarios, including urban infrastructure, transportation, industry, personal life, and other socio-economic fields. The introduction of deep learning has brought new security challenges, like an increment in abnormal traffic, which threatens network security. Insufficient feature extraction leads to less accurate classification results. In abnormal traffic detection, the data of network traffic is high-dimensional and complex. This data not only increases the computational burden of model training but also makes information extraction more difficult. To address these issues, this paper proposes an MD-MRD-ResNeXt model for abnormal network traffic detection. To fully utilize the multi-scale information in network traffic, a Multi-scale Dilated feature extraction (MD) block is introduced. This module can effectively understand and process information at various scales and uses dilated convolution technology to significantly broaden the model’s receptive field. The proposed Max-feature-map Residual with Dual-channel pooling (MRD) block integrates the maximum feature map with the residual block. This module ensures the model focuses on key information, thereby optimizing computational efficiency and reducing unnecessary information redundancy. Experimental results show that compared to the latest methods, the proposed abnormal traffic detection model improves accuracy by about 2%.
DUdetector: A Dual-Granularity Unsupervised Model for Network Anomaly Detection

Haijun Geng,Qi Ma,Haotian Chi,Zhi Zhang,Jing Yang,Xia Yin

DOI: https://doi.org/10.1016/j.comnet.2024.110937

IF: 5.493

2024-01-01

Computer Networks

Abstract:Internet of Things (IoT) devices are often used as springboards for network intrusion due to the open nature of IoT protocol stacks that enable automatic inter-connection and data sharing among devices, so it is critical to develop network anomaly detection algorithms that can be deployed at important nodes such as gateways and routers. However, existing detection algorithms based on signature rules and supervised machine learning heavily rely on known anomaly types, yielding low detection accuracy when deployed in realistic network environments with a significant number of unknown attacks. With this in mind, we propose DUdetector, an unsupervised anomaly detection algorithm by employing Transformer and Conv1d&MaxPool1d AutoEncoder with residual connection (abbr., CM&RC-AE) to realize a dual-granularity learning from the perspective of segments and points, respectively. Specifically, we perform coarse-grained segment-level anomaly detection based on an improved Transformer to detect whether there is any anomalous traffic within a time window. Then, we perform fine-grained point-level anomaly detection based on CM&RC-AE for each packet within the problematic segment output by the first step. Extensive experiments on three datasets (SSDP Flood, Mirai and IDS2017) demonstrate that our DUdetector achieves a better performance than existing work: an F1-score of 95.98% for Mirai, and over 99.2% for both SSDP Flood and IDS2017, with false positive rates less than 0.5% for all three datasets.
Research on Anomaly Network Detection Based on Self-Attention Mechanism

Wanting Hu,Lu Cao,Qunsheng Ruan,Qingfeng Wu

DOI: https://doi.org/10.3390/s23115059

2023-05-25

Abstract:Network traffic anomaly detection is a key step in identifying and preventing network security threats. This study aims to construct a new deep-learning-based traffic anomaly detection model through in-depth research on new feature-engineering methods, significantly improving the efficiency and accuracy of network traffic anomaly detection. The specific research work mainly includes the following two aspects: 1. In order to construct a more comprehensive dataset, this article first starts from the raw data of the classic traffic anomaly detection dataset UNSW-NB15 and combines the feature extraction standards and feature calculation methods of other classic detection datasets to re-extract and design a feature description set for the original traffic data in order to accurately and completely describe the network traffic status. We reconstructed the dataset DNTAD using the feature-processing method designed in this article and conducted evaluation experiments on it. Experiments have shown that by verifying classic machine learning algorithms, such as XGBoost, this method not only does not reduce the training performance of the algorithm but also improves its operational efficiency. 2. This article proposes a detection algorithm model based on LSTM and the recurrent neural network self-attention mechanism for important time-series information contained in the abnormal traffic datasets. With this model, through the memory mechanism of the LSTM, the time dependence of traffic features can be learned. On the basis of LSTM, a self-attention mechanism is introduced, which can weight the features at different positions in the sequence, enabling the model to better learn the direct relationship between traffic features. A series of ablation experiments were also used to demonstrate the effectiveness of each component of the model. The experimental results show that, compared to other comparative models, the model proposed in this article achieves better experimental results on the constructed dataset.

Midbrain-to-pons ratio in autopsy-confirmed progressive supranuclear palsy: replication in an independent cohort

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

The Detection of Abnormal Behavior by Artificial Intelligence Algorithms Under Network Security

DMU-TransNet: Dense multi-scale U-shape transformer network for anomaly detection

Attention Based CNN-LSTM Network for Anomaly Pattern Classification of Multivariate Time Series

WT-CFormer: High-Performance Web Traffic Anomaly Detection Using CNN and Transformer Networks

Learning Multi-Pattern Normalities in the Frequency Domain for Efficient Time Series Anomaly Detection

MSCA: an Unsupervised Anomaly Detection System for Network Security in Backbone Network.

CANet: Convolutional Attention-based Network for Multivariate Time Series Anomaly Detection

MFVT: an anomaly traffic detection method merging feature fusion network and vision transformer architecture

DTAAD: Dual Tcn-attention networks for anomaly detection in multivariate time series data

TTSAD:TCN-Transformer-SVDD Model for Anomaly Detection in Air Traffic ADS-B Data

A Multi-Modal Approach For Context-Aware Network Traffic Classification

A novel multi-scale network intrusion detection model with transformer

A Network Traffic anomaly Detection method based on CNN and XGBoost

Network Traffic Anomaly Detection Method Based on Multi scale Residual Feature

DDMT: Denoising Diffusion Mask Transformer Models for Multivariate Time Series Anomaly Detection

Abnormal Traffic Detection for Internet of Things Based on an Improved Residual Network

DUdetector: A Dual-Granularity Unsupervised Model for Network Anomaly Detection

Research on Anomaly Network Detection Based on Self-Attention Mechanism