Abstract:With the rapid growth of the categories and numbers of network attacks and the increasing network bandwidth, network traffic anomaly detection systems confront with both higher false positive rate and false negative rate. A traffic anomaly detection system with high precision is presented in this paper. First, we use multi-level and multi-dimensional online OLAP method to analyze traffic data. In order to reduce the computational and space complexity in this analytical process, some optimization strategies are applied in building DetectCube, the minimal directed Steiner tree algorithm is adapted to optimize multiple query on the Cube, and the traffic data is summarized at appropriate level with the help of discovery-driven exploration method. Second, a concept of entropy to measure the distribution of traffic on some particular dimensions is given and the values of entropy in every window and every Group-By operation are collected to form multiple time series of entropy. Finally, we employ one-class support vector machine to classify this multidimensional time series of entropy to achieve the purpose of anomaly detection. The proposed traffic anomaly detection system is validated and evaluated by comparing it with existed systems derived from a lot of real network traffic data sets. Our system can detect attacks with high accuracy and efficiency.

Research on network anomaly attack detection based data mining

Packet Payload Based Anomalous Network Intrusion Detection

PRACTICAL NETWORK ANOMALY DETECTION USING DATA MINING TECHNIQUES

An Abnormal Network Traffic Detection Algorithm Based on Big Data Analysis

Anomaly Network Intrusion Detection System Based on Data Mining

Research of Anomaly Detection System Based on Data Mining

Behavior Pattern Mining from Traffic and Its Application to Network Anomaly Detection

Hybrid Intrusion Detection Based on Data Mining

Machine learning-based intrusion detection algorithms

Research on Principle Techniques for Network Intrusion Detection Based on Data Mining and Analysis Approach

Applications of data mining to network intrusion detection

Data mining methods for anomaly detection of HTTP request exploitations

Abnormal Detection Research Based on Outlier Mining

A Novel Intrusion Detection System Based on Data Mining

Active Detection and Feature Analysis About Network Anomaly

Study on Abnormal Detection Based on System Call and Data Mining Technique

Research on the detection of abnormal traffic for multi-channel network

Research on Network Intrusion Detection Based on Data Mining

A Time Series Data Mining Based on ARMA and Hopfield Model for Intrusion Detection

A Transform Domain-Based Anomaly Detection Approach To Network-Wide Traffic

An intrusion detection scheme based on anomaly mining in internet of things