Abstract:Anomaly detection plays an important role in industry, especially in ensuring system safety and product quality. Due to the unavailability of anomalous data in many practical cases, anomaly detection is usually solved by one-class classification (OCC) methods using only normal data. As a classical OCC method, one-class support vector machine (OCSVM) is a popular discriminative approach for anomaly detection, which detects abnormal data points by establishing a decision boundary in the kernel space. However, the performance of OCSVM heavily relies on kernel parameters, whose selection is not trivial for anomaly detection problems. Moreover, for some uneven and complex data distributions, different data regions may have quite different densities and shapes, making it difficult for OCSVM to obtain good boundaries in all regions using a global kernel parameter. To address the above two issues, in this article, we propose a hybrid algorithm incorporating vector quantization and OCSVM (VQ-OCSVM). Specifically, vector quantization is used to extract distribution information of normal data, and the results are used to construct an explicit mapping function to map data into a high-dimensional feature space. Then, OCSVM is performed in the feature space to build a classifier. By introducing the explicit mapping into OCSVM, the proposed method can effectively bypass the kernel parameter selection problem of the classical OCSVM method. Furthermore, the constructed mapping carries the data distribution information, and the VQ-OCSVM model can be regarded as an integration of generative learning and discriminative learning. The complementary properties of these two paradigms make the proposed VQ-OCSVM algorithm have better generalization capacity for complex data distribution. Both qualitative and quantitative experimental results demonstrate the effectiveness and advantages of the proposed method.

Network Anomaly Detection Using Dissimilarity-Based One-Class Svm Classifier

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

Anomaly Detection in Computer Networks Using Dissimilarity-Based One-Class Classifiers

Ch-Svm Based Network Anomaly Detection

Anomaly-Based Network Intrusion Detection Using SVM

A Hybrid Algorithm Incorporating Vector Quantization and One-Class Support Vector Machine for Industrial Anomaly Detection

Anomaly Detection Model Based on Hybrid Classifiers

A Model Based on Hybrid Support Vector Machine and Self-Organizing Map for Anomaly Detection

Anomaly Intrusion Detection Method Based on SVDD

A Novel Model for Anomaly Detection in Network Traffic Based on Kernel Support Vector Machine

Improving One-Class SVM for Anomaly Detection

Anomaly Intrusion Detection Using One Class Svm

PCA/KPCA Feature Extraction Approach to SVM for Anomaly Detection

A Novel Model for Anomaly Detection in Network Traffic Based on Support Vector Machine and Clustering

Real-time intrusion detection system based on one-class SVM

Network Anomaly Detection Via Similarity-Aware Ensemble Learning with ADSIM

Efficient Anomaly Detection for High-Dimensional Sensing Data With One-Class Support Vector Machine

Network Anomaly Detection Based on TCM-KNN Algorithm

An anomaly detection model for information acquisition

Application of SVM in Anomaly Detection Based on Sampling and Feature Extraction

A Hybrid Methodologies for Intrusion Detection Based Deep Neural Network with Support Vector Machine and Clustering Technique