Abstract:With the popularity of Internet applications, a large amount of Internet behavior log data is generated. Abnormal behaviors of corporate employees may lead to internet security issues and data leakage incidents. To ensure the safety of information systems, it is important to research on anomaly prediction of Internet behaviors. Due to the high cost of labeling big data manually, an unsupervised generative model-Anomaly Prediction of Internet behavior based on Generative Adversarial Networks (APIBGAN), which works only with a small amount of labeled data, is proposed to predict anomalies of Internet behaviors. After the input Internet behavior data is preprocessed by the proposed method, the data-generating generative adversarial network (DGGAN) in APIBGAN learns the distribution of real Internet behavior data by leveraging neural networks' powerful feature extraction from the data to generate Internet behavior data with random noise. The APIBGAN utilizes these labeled generated data as a benchmark to complete the distance-based anomaly prediction. Three categories of Internet behavior sampling data from corporate employees are employed to train APIBGAN: (1) Online behavior data of an individual in a department. (2) Online behavior data of multiple employees in the same department. (3) Online behavior data of multiple employees in different departments. The prediction scores of the three categories of Internet behavior data are 87.23%, 85.13%, and 83.47%, respectively, and are above the highest score of 81.35% which is obtained by the comparison method based on Isolation Forests in the CCF Big Data & Computing Intelligence Contest (CCF-BDCI). The experimental results validate that APIBGAN predicts the outlier of Internet behaviors effectively through the GAN, which is composed of a simple three-layer fully connected neural networks (FNNs). We can use APIBGAN not only for anomaly prediction of Internet behaviors but also for anomaly prediction in many other applications, which have big data infeasible to label manually. Above all, APIBGAN has broad application prospects for anomaly prediction, and our work also provides valuable input for anomaly prediction-based GAN.

BGP Anomaly Detection Based on Automatic Feature Extraction by Neural Network

A Multi-View Framework for BGP Anomaly Detection Via Graph Attention Network

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

Understanding And Utilizing The Hierarchy Of Abnormal Bgp Events

ISP Self-Operated BGP Anomaly Detection Based on Weakly Supervised Learning.

Accurate Anomaly Detection Leveraging Knowledge-enhanced GAT

Border Gateway Protocol Route Leak Detection Technique Based on Graph Features and Machine Learning

Features Extraction Based On Deep Analysis Of Network Packets In Industrial Control Systems

An efficient network behavior anomaly detection using a hybrid DBN-LSTM network

A Network Traffic anomaly Detection method based on CNN and XGBoost

Abnormal Traffic Detection: Traffic Feature Extraction and DAE-GAN With Efficient Data Augmentation

Learning with Semantics: Towards a Semantics-Aware Routing Anomaly Detection System

Characterizing Network Anomaly Traffic with Euclidean Distance-Based Multiscale Fuzzy Entropy.

Using EBGAN for Anomaly Intrusion Detection

Matrix Profile data mining for BGP anomaly detection

Anomaly traffic detection in IoT security using graph neural networks

Research on Anomaly Network Detection Based on Self-Attention Mechanism

Anomaly prediction of Internet behavior based on generative adversarial networks

Passenger flow anomaly detection in urban rail transit networks with graph convolution network-informer and Gaussian Bayes models

MAD-MulW: A Multi-Window Anomaly Detection Framework for BGP Security Events

Borderline SMOTE Algorithm and Feature Selection-Based Network Anomalies Detection Strategy