Abstract:Anomaly detection plays an important role in industry, especially in ensuring system safety and product quality. Due to the unavailability of anomalous data in many practical cases, anomaly detection is usually solved by one-class classification (OCC) methods using only normal data. As a classical OCC method, one-class support vector machine (OCSVM) is a popular discriminative approach for anomaly detection, which detects abnormal data points by establishing a decision boundary in the kernel space. However, the performance of OCSVM heavily relies on kernel parameters, whose selection is not trivial for anomaly detection problems. Moreover, for some uneven and complex data distributions, different data regions may have quite different densities and shapes, making it difficult for OCSVM to obtain good boundaries in all regions using a global kernel parameter. To address the above two issues, in this article, we propose a hybrid algorithm incorporating vector quantization and OCSVM (VQ-OCSVM). Specifically, vector quantization is used to extract distribution information of normal data, and the results are used to construct an explicit mapping function to map data into a high-dimensional feature space. Then, OCSVM is performed in the feature space to build a classifier. By introducing the explicit mapping into OCSVM, the proposed method can effectively bypass the kernel parameter selection problem of the classical OCSVM method. Furthermore, the constructed mapping carries the data distribution information, and the VQ-OCSVM model can be regarded as an integration of generative learning and discriminative learning. The complementary properties of these two paradigms make the proposed VQ-OCSVM algorithm have better generalization capacity for complex data distribution. Both qualitative and quantitative experimental results demonstrate the effectiveness and advantages of the proposed method.

Anomaly Intrusion Detection Using One Class Svm

Novel Machine Learning Techniques for Anomaly Intrusion Detection.

A Novel Intrusion Detection System Based on an Optimal Hybrid Kernel Extreme Learning Machine

Anomaly-Based Network Intrusion Detection Using SVM

Improving One-Class SVM for Anomaly Detection

Anomalous Human Activity Detection Based on Online One-Class Svm with N-Grams Kernel

Useful anomaly intrusion detection method using multiple-instance learning

Intrusion Detection Research Based on Kernel Function

A Hybrid Algorithm Incorporating Vector Quantization and One-Class Support Vector Machine for Industrial Anomaly Detection

Intrusion detection using SVM

High-order Markov kernels for intrusion detection.

An Anomaly Intrusion Detection Technique Based on Dual V Support Vector Machine

Network Anomaly Detection Using Dissimilarity-Based One-Class Svm Classifier

Real-time intrusion detection system based on one-class SVM

Intrusion Detection System Based on One-Class Support Vector Machine and Gaussian Mixture Model

A Novel Framework For Anomaly Detection Based On Hybrid Hmm-Svm Model

A Model Based on Hybrid Support Vector Machine and Self-Organizing Map for Anomaly Detection

AN INTRUSION DETECTION METHOD BASED ON SVM

Anomaly Detection Model Based on Hybrid Classifiers

High-Order Markov Kernels For Network Intrusion Detection

A hybrid unsupervised clustering-based anomaly detection method