Abstract:The sophistication and diversity of contemporary cyberattacks have rendered the use of proxies, gateways, firewalls, and encrypted tunnels as a standalone defensive strategy inadequate. Consequently, the proactive identification of data anomalies has emerged as a prominent area of research within the field of data security. The majority of extant studies concentrate on sample equilibrium data, with the consequence that the detection effect is not optimal in the context of unbalanced data. In this study, the unsupervised learning method is employed to identify anomalies in dynamic data flows. Initially, multi-dimensional features are extracted from real-time data, and a clustering algorithm is utilised to analyse the patterns of the data. This enables the potential outliers to be automatically identified. By clustering similar data, the model is able to detect data behaviour that deviates significantly from normal traffic without the need for labelled data. The results of the experiments demonstrate that the proposed method exhibits high accuracy in the detection of anomalies across a range of scenarios. Notably, it demonstrates robust and adaptable performance, particularly in the context of unbalanced data.

Real-time Anomaly Detection Model for Worm Mails in High-Speed Network

Packet Payload Based Anomalous Network Intrusion Detection

Worm Intrusion Alarm Modeling Based on Network Traffic Character

An Effective Anomaly Detection Method in SMTP Traffic

Detecting Randomly Scanning Worms Based on Heavy-Tailed Property

Research of Characteristics of Worm Traffic

Anomaly Detection in SMTP Traffic

Network Traffic Flow Analysis And Its Application In Early Detection Of Internet Worms

Stratified Analysis of Network Flows and Its Application to Early Detection of Internet Worms

Anomaly Detection Method Based on Wavelet

Anomaly detection for network traffic flow

Worm detection technology research of net-flow dynamic critical line established based on statistical analytic method

Research on Worm Epidemics and Visualization in High-Speed Links

Survey of Research on Anomaly Detection of Wavelet Analysis Based on Network Traffic

A Novel Anomaly Detection Method for Worms

Research on Dynamic Data Flow Anomaly Detection based on Machine Learning

Detection of email attack in encrypted network traffic based on abnormal behavior analysis

Distributed Stealthy Traffic Anomaly Detection Based on Wavelet Packet Analysis

High-speed anomaly traffic detection based on staged frequency domain features

Study on Event-Sequence Based Worm Behavior Analysis in Internet

Wavelet Analysis Based Worm Attack Early Detection