Abstract:Computer network anomaly detection and log analysis, as an important topic in the field of network security, has been a key task to ensure network security and system reliability. First, existing network anomaly detection and log analysis methods are often challenged by high-dimensional data and complex network topologies, resulting in unstable performance and high false-positive rates. In addition, traditional methods are usually difficult to handle time-series data, which is crucial for anomaly detection and log analysis. Therefore, we need a more efficient and accurate method to cope with these problems. To compensate for the shortcomings of current methods, we propose an innovative fusion model that integrates Isolation Forest, GAN (Generative Adversarial Network), and Transformer with each other, and each of them plays a unique role. Isolation Forest is used to quickly identify anomalous data points, and GAN is used to generate synthetic data with the real data distribution characteristics to augment the training dataset, while the Transformer is used for modeling and context extraction on time series data. The synergy of these three components makes our model more accurate and robust in anomaly detection and log analysis tasks. We validate the effectiveness of this fusion model in an extensive experimental evaluation. Experimental results show that our model significantly improves the accuracy of anomaly detection while reducing the false alarm rate, which helps to detect potential network problems in advance. The model also performs well in the log analysis task and is able to quickly identify anomalous behaviors, which helps to improve the stability of the system. The significance of this study is that it introduces advanced deep learning techniques, which work anomaly detection and log analysis.

Research on Collaborative Visual Analysis of Large Scale Network Security Data

OCEANS: online collaborative explorative analysis on network security

A real-time network security visualization system based on incremental learning (ChinaVis 2018)

CollaborationViz: Interactive Visual Exploration of Biomedical Research Collaboration Networks

A Collaborative Visual Analysis System for Communication Pattern Discovery

Network Security Situation Awareness Technology Based on Multi-source Heterogeneous Data

A Survey of Network Anomaly Visualization

Interactive and Collaborative Visual Analysis on Traffic Sensor Data.

A Visual Analysis Approach for Community Detection of Multi-Context Mobile Social Networks

Graph database-based network security situation awareness data storage method

Parallel Visualization for Large-Scale Datasets

Scalable Network Traffic Visualization Using Compressed Graphs.

Networked Data Mining Based on Social Network Visualizations

TrustVis: Visualizing Trust Toward Attack Identification in Distributed Computing Environments

Visualizing graph dynamics and similarity for enterprise network security and management

Enhancing power communication network security: A comprehensive cyber risk visual analytics framework with real-time risk assessment

Multilevel Visual Analysis of Aggregate Geo-Networks.

A Platform for Collaborative Visual Analysis on Streaming Messages

Deep Learning-based Anomaly Detection and Log Analysis for Computer Networks

A network security situational awareness model based on multi-source heterogeneous sensors

An Interactive Visual Analytics Approach for Network Anomaly Detection Through Smart Labeling