Abstract:Anomaly detection plays an important role in industry, especially in ensuring system safety and product quality. Due to the unavailability of anomalous data in many practical cases, anomaly detection is usually solved by one-class classification (OCC) methods using only normal data. As a classical OCC method, one-class support vector machine (OCSVM) is a popular discriminative approach for anomaly detection, which detects abnormal data points by establishing a decision boundary in the kernel space. However, the performance of OCSVM heavily relies on kernel parameters, whose selection is not trivial for anomaly detection problems. Moreover, for some uneven and complex data distributions, different data regions may have quite different densities and shapes, making it difficult for OCSVM to obtain good boundaries in all regions using a global kernel parameter. To address the above two issues, in this article, we propose a hybrid algorithm incorporating vector quantization and OCSVM (VQ-OCSVM). Specifically, vector quantization is used to extract distribution information of normal data, and the results are used to construct an explicit mapping function to map data into a high-dimensional feature space. Then, OCSVM is performed in the feature space to build a classifier. By introducing the explicit mapping into OCSVM, the proposed method can effectively bypass the kernel parameter selection problem of the classical OCSVM method. Furthermore, the constructed mapping carries the data distribution information, and the VQ-OCSVM model can be regarded as an integration of generative learning and discriminative learning. The complementary properties of these two paradigms make the proposed VQ-OCSVM algorithm have better generalization capacity for complex data distribution. Both qualitative and quantitative experimental results demonstrate the effectiveness and advantages of the proposed method.

An Improved SVM Method in Anomaly Detection

Intrusion Detection Based on Improved SVM Algorithm

Intrusion detection using SVM

Intrusion Detection Based on Improved SVM Active Learning

Support Vector Machine Based Optimal Model Selection Method in Anomaly Detection

An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection

A Hybrid Algorithm Incorporating Vector Quantization and One-Class Support Vector Machine for Industrial Anomaly Detection

Improved SVM algorithm for imbalanced dataset classification

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

Application of SVM in Anomaly Detection Based on Sampling and Feature Extraction

Enhancing Anomaly Detection Models for Industrial Applications through SVM-Based False Positive Classification

A hybrid unsupervised clustering-based anomaly detection method

Anomaly Detection System Based on Principal Component Analysis and Support Vector Machine

Hybrid SVM algorithm oriented to classifying imbalanced datasets

SVM Classification:Its Contents and Challenges

A New Intelligent Intrusion Detection Method Based on Attribute Reduction and Parameters Optimization of SVM

Ch-Svm Based Network Anomaly Detection

Intrusion Detection Based on Support Vector Machine Ensemble with Bagging

Learning Automata Based SVM for Intrusion Detection

Data-Driven Anomaly Detection Using OCSVM with Boundary Optimzation

Anomaly detection using improved deep SVDD model with data structure preservation