Abstract:Intelligent network systems have become an integral part of society, communication methods and corresponding protocols are the basis for the realization of information exchange in these systems. As network attacks often take advantage of the vulnerabilities in the protocols to launch attacks with different characteristics, many detection methods have been investigated by professionals. To address this challenge, we propose an approach that uses an algorithm for clustering to compute anomaly scores to initialize the classifier's sample weights and adaptively optimize these scores, which is then achieved by learning the adaptive weights for each group to achieve a group-level balance between different protocol attack groups. Our approach focuses on error-prone samples and aims to improve the adequate representation of a small number of protocol groups. At the same time, we reduce the inter-group difference and improve the accuracy of the classifier for better fairness. We construct closed-form solutions with adaptive weight assignment and use convex optimization to ensure theoretical convergence. To validate the theoretical superiority and accuracy of the methods, we conduct experiments on the KDD, NSLKDD, and CIC-IDS datasets and compared them to current state-of-the-art methods. Compared to the baseline method, our approach demonstrates improvements in both fairness indicators and accuracy across three datasets. These experimental results show that our proposed method outperforms existing methods in terms of performance. In addition, our technique exhibits robustness to noisy labels in various benchmark datasets. To enhance the reproducibility of the paper, we have uploaded the source code to GitHub at the following URL: https://github.com/dazhi-ui/Fairness_Detection.

K-Means Clustering Analysis Based On Adaptive Weights For Malicious Code Detection

A FEATURE SELECTION AND MODELLING METHOD FOR MALICIOUS CODE

Online Analytical Model of Massive Malware Based on Feature Clusting

Malicious Code Detection Based on Software Fingerprint

Malware Analysis Using Machine Learning and Deep Learning Techniques

Malicious Code Detection Method Based on Static Features and Ensemble Learning

The Algorithm of Malicious Code Detection Based on Data Mining

Behavior-Based Proactive Detection of Unknown Malicious Codes

Hybrid Weighted K-Means Clustering and Artificial Neural Network for an Anomaly-Based Network Intrusion Detection System

Real-time Detection of Malicious Web Pages Based on Statistical Learning

Malware Analysis and Detection Using Machine Learning Algorithms

Hybrid Intrusion Detection Method Based on CM-K-Means

Malicious Node Detection Based on Self Encoder and Adaptive Kernel Density Estimation

Semi-Supervised Malware Clustering Based on the Weight of Bytecode and API.

Malicious Code Detection Based on CNNs and Multi-Objective Algorithm

Feature Representation and Selection in Malicious Code Detection Methods Based on Static System Calls

Method for Detecting the Obfuscated Malicious Code Based on Behavior Connection

An Efficient Malicious Code Detection System Based on Convolutional Neural Networks

Network-based Malcode Detection Technology

Fairness Based on Anomaly Score and Adaptive Weight in Network Attack Detection

Learning Edge Weights in File Co-Occurrence Graphs for Malware Detection