Abstract:Anomaly detection plays an important role in industry, especially in ensuring system safety and product quality. Due to the unavailability of anomalous data in many practical cases, anomaly detection is usually solved by one-class classification (OCC) methods using only normal data. As a classical OCC method, one-class support vector machine (OCSVM) is a popular discriminative approach for anomaly detection, which detects abnormal data points by establishing a decision boundary in the kernel space. However, the performance of OCSVM heavily relies on kernel parameters, whose selection is not trivial for anomaly detection problems. Moreover, for some uneven and complex data distributions, different data regions may have quite different densities and shapes, making it difficult for OCSVM to obtain good boundaries in all regions using a global kernel parameter. To address the above two issues, in this article, we propose a hybrid algorithm incorporating vector quantization and OCSVM (VQ-OCSVM). Specifically, vector quantization is used to extract distribution information of normal data, and the results are used to construct an explicit mapping function to map data into a high-dimensional feature space. Then, OCSVM is performed in the feature space to build a classifier. By introducing the explicit mapping into OCSVM, the proposed method can effectively bypass the kernel parameter selection problem of the classical OCSVM method. Furthermore, the constructed mapping carries the data distribution information, and the VQ-OCSVM model can be regarded as an integration of generative learning and discriminative learning. The complementary properties of these two paradigms make the proposed VQ-OCSVM algorithm have better generalization capacity for complex data distribution. Both qualitative and quantitative experimental results demonstrate the effectiveness and advantages of the proposed method.

Intrusion detection algorithm of industrial control network based on improved one-class support vector machine

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

An Improved Support Vector Machine Attack Detection Algorithm for Industry Controls System

Intrusion Detection Method of Industrial Control System Based on RIPCA-OCSVM

A Hybrid Algorithm Incorporating Vector Quantization and One-Class Support Vector Machine for Industrial Anomaly Detection

Distributed Online One-Class Support Vector Machine for Anomaly Detection over Networks

Instruction Detection in SCADA/Modbus Network Based on Machine Learning

An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model

Intrusion Detection System Based on One-Class Support Vector Machine and Gaussian Mixture Model

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Application of Improved Support Vector Machines in Network Intrusion Detection

A New Industrial Intrusion Detection Method Based on CNN-BiLSTM

Real-time intrusion detection system based on one-class SVM

Anomaly-Based Network Intrusion Detection Using SVM

Industrial network intrusion detection in open-set scenarios

Network Anomaly Detection Using Dissimilarity-Based One-Class Svm Classifier

A Novel Method Based on Clustering Algorithm and SVM for Anomaly Intrusion Detection of Wireless Sensor Networks

Research on Intrusion Detection of Industrial Control System Based on FastICA-SVM Method.

Application of Support Vector Machines on Network Abnormal Intrusion Detection

A Hybrid Methodologies for Intrusion Detection Based Deep Neural Network with Support Vector Machine and Clustering Technique

Combining ensemble methods and social network metrics for improving accuracy of OCSVM on intrusion detection in SCADA systems