Abstract:Anomaly detection in computer networks is a complex task that requires the distinction of normality and anomaly. Network attack detection in information systems is a constant challenge in computer security research, as information systems provide essential services for enterprises and individuals. The consequences of these attacks could be the access, disclosure, or modification of information, as well as denial of computer services and resources. Intrusion Detection Systems (IDS) are developed as solutions to detect anomalous behavior, such as denial of service, and backdoors. The proposed model was inspired by the behavior of dendritic cells and their interactions with the human immune system, known as Dendritic Cell Algorithm (DCA), and combines the use of Multiresolution Analysis (MRA) Maximal Overlap Discrete Wavelet Transform (MODWT), as well as the segmented deterministic DCA approach (S-dDCA). The proposed approach is a binary classifier that aims to analyze a time-frequency representation of time-series data obtained from high-level network features, in order to classify data as normal or anomalous. The MODWT was used to extract the approximations of two input signal categories at different levels of decomposition, and are used as processing elements for the multi resolution DCA. The model was evaluated using the NSL-KDD, UNSW-NB15, CIC-IDS2017 and CSE-CIC-IDS2018 datasets, containing contemporary network traffic and attacks. The proposed MRA S-dDCA model achieved an accuracy of 97.37%, 99.97%, 99.56%, and 99.75% for the tested datasets, respectively. Comparisons with the DCA and state-of-the-art approaches for network anomaly detection are presented. The proposed approach was able to surpass state-of-the-art approaches with UNSW-NB15 and CSECIC-IDS2018 datasets, whereas the results obtained with the NSL-KDD and CIC-IDS2017 datasets are competitive with machine learning approaches.

An Anomaly Detection Model Based on Cloud Model and Danger Theory.

Learning Multi-Pattern Normalities in the Frequency Domain for Efficient Time Series Anomaly Detection

A Data Mining Method Using Deep Learning for Anomaly Detection in Cloud Computing Environment

Anomaly Detection System in Cloud Environment Using Fuzzy Clustering Based ANN

Intelligent Anomaly Detection and Mitigation in Data Centers

Dendritic Cells for Anomaly Detection.

An Effective Method for Computer Network Anomaly Detection

Anomaly network traffic detection algorithm based on information entropy measurement under the cloud computing environment

Hybrid Cloud-Edge Collaborative Data Anomaly Detection in Industrial Sensor Networks

Multiresolution dendritic cell algorithm for network anomaly detection

A Rough Set Theory Based Method for Anomaly Intrusion Detection in Computer Network Systems

A Spatiotemporal Deep Learning Approach for Unsupervised Anomaly Detection in Cloud Systems

Anomaly detecting and ranking of the cloud computing platform by multi-view learning

DESIGN AND IMPLEMENTATION OF OPENSTACK-BASED ADAPTIVE ANOMALY DETECTION MODEL

Deep Learning-Based Anomaly Traffic Detection Method in Cloud Computing Environment

Detecting Danger: The Dendritic Cell Algorithm

Cross-dataset Time Series Anomaly Detection for Cloud Systems

Research of Anomaly Detection System Based on Data Mining

Cloud Network Anomaly Detection Using Machine and Deep Learning Techniques— Recent Research Advancements

Wavelet-based Approach for Anomaly Detection of Online Services in Cloud Computing Systems

Anomaly-Based Web Attack Detection: A Deep Learning Approach