Abstract:With the rapid development of network technology, the Internet has brought significant convenience to various sectors of society, holding a prominent position. Due to the unpredictable and severe consequences resulting from malicious attacks, the detection of anomalous network traffic has garnered considerable attention from researchers over the past few decades. Accurately labeling a sufficient amount of network traffic data as a training dataset within a short period of time is a challenging task, given the rapid and massive generation of network traffic data. Furthermore, the proportion of malicious attack traffic is relatively small compared to the overall traffic data, and the distribution of traffic data across different types of malicious attacks also varies significantly. To address the aforementioned challenges, this paper presents a novel network anomaly detection algorithm based on semi-supervised learning and adaptive multiclass balancing. Building upon the assumption of consistent distribution between labeled and unlabeled data, this paper introduces the multiclass split balancing strategy and the adaptive confidence threshold function. These innovative approaches aim to tackle the issue of the multiclass imbalanced in traffic data. By leveraging the mutually beneficial relationship between semi-supervised learning and ensemble learning, this paper presents the collaborative rotation forest algorithm. This algorithm is specifically designed to enhance performance of anomaly detection in an environment with label inadequacy. Several comparative experiments conducted on the NSL-KDD, UNSW-NB15, and ToN-IoT demonstrate that the proposed algorithm achieves significant improvements in performance. Specifically, it enhances precision by 1.5–5.7%, recall by 1.5−5.7%, and F-Measure by 1.4−4.3% compared to the state-of-the-art algorithms.

A Hybrid Approach Of Http Anomaly Detection

A Modified Hybrid Method Based on PSO, GA, and K-Means for Network Anomaly Detection

A hybrid unsupervised clustering-based anomaly detection method

Hybrid Cloud-Edge Collaborative Data Anomaly Detection in Industrial Sensor Networks

A Hybrid Approach: Utilising Kmeans Clustering and Naive Bayes for IoT Anomaly Detection

A multilevel hybrid anomaly detection scheme for industrial wireless sensor networks

Anomaly network traffic detection algorithm based on information entropy measurement under the cloud computing environment

Hybrid Anomaly Detection by Using Clustering for Wireless Sensor Network

An Approach for Anomaly Diagnosis Based on Hybrid Graph Model with Logs for Distributed Services

Hybrid Intrusion Detection Based on Data Mining

A Hybrid Deep Learning Anomaly Detection Framework for Intrusion Detection

Network Anomaly Detection and Localization

Hybrid Intrusion Detection Method Based on CM-K-Means

An Exhaustive Research on the Application of Intrusion Detection Technology in Computer Network Security in Sensor Networks

A network anomaly detection algorithm based on semi-supervised learning and adaptive multiclass balancing

Symmetry Degree Measurement and Its Applications to Anomaly Detection

An Effective Method for Computer Network Anomaly Detection

HybridAD: A Hybrid Model-Driven Anomaly Detection Approach for Multivariate Time Series

Anomaly detection in online social networks

Internet Anomaly Detection Based on Complex Network Path

New hybrid ensemble method for anomaly detection in data science