Abstract:Network anomaly detection aims to find network elements (e.g., nodes, edges, subgraphs) with significantly different behaviors from the vast majority. It has a profound impact in a variety of applications ranging from finance, healthcare to social network analysis. Due to the unbearable labeling cost, existing methods are predominately developed in an unsupervised manner. Nonetheless, the anomalies they identify may turn out to be data noises or uninteresting data instances due to the lack of prior knowledge on the anomalies of interest. Hence, it is critical to investigate and develop few-shot learning for network anomaly detection. In real-world scenarios, few labeled anomalies are also easy to be accessed on similar networks from the same domain as of the target network, while most of the existing works omit to leverage them and merely focus on a single network. Taking advantage of this potential, in this work, we tackle the problem of few-shot network anomaly detection by (1) proposing a new family of graph neural networks -- Graph Deviation Networks (GDN) that can leverage a small number of labeled anomalies for enforcing statistically significant deviations between abnormal and normal nodes on a network; and (2) equipping the proposed GDN with a new cross-network meta-learning algorithm to realize few-shot network anomaly detection by transferring meta-knowledge from multiple auxiliary networks. Extensive evaluations demonstrate the efficacy of the proposed approach on few-shot or even one-shot network anomaly detection.

A Novel Data Mining Method for Network Anomaly Detection Based on Transductive Scheme

A Network Anomaly Detection Method Based on Transduction Scheme

Network Anomaly Detection Based on TCM-KNN Algorithm

PRACTICAL NETWORK ANOMALY DETECTION USING DATA MINING TECHNIQUES

A Novel Unsupervised Anomaly Detection Approach for Intrusion Detection System

Novel Network Intrusion Detection Algorithm Based on Sequence Data Mining

A Novel Network Intrusion Detection Algorithm Based on Density Estimation

An Abnormal Network Traffic Detection Algorithm Based on Big Data Analysis

Network Anomaly Detection Algorithm Based on Lindeberg-Feller Central Limit Theorem

Few-shot Network Anomaly Detection via Cross-network Meta-learning

Application of Branch and Bound Algorithm Based on K-MEANS Clustering in Network Anomaly Detection

Behavior Pattern Mining from Traffic and Its Application to Network Anomaly Detection

An Effective Method for Computer Network Anomaly Detection

A Network Anomaly Detection Algorithm Based on Natural Neighborhood Graph.

Network Anomaly Detection Based on Frequent Sub-Graph Mining Approach and Association Analysis

Network Anomaly Detection Based on Semi-supervised Clustering

A Dynamic Network Anomaly Detection Method Based On Trend Analysis

Optimizing Network Anomaly Detection Scheme Using Instance Selection Mechanism

An Unsupervised Network Intrusion Detection Based on Anomaly Analysis

A Novel Multi-Modal Incremental Tensor Decomposition for Anomaly Detection in Large-Scale Networks

Multi-layer Anomaly Detection for Internet Traffic Based on Data Mining