Abstract:Computer network anomaly detection and log analysis, as an important topic in the field of network security, has been a key task to ensure network security and system reliability. First, existing network anomaly detection and log analysis methods are often challenged by high-dimensional data and complex network topologies, resulting in unstable performance and high false-positive rates. In addition, traditional methods are usually difficult to handle time-series data, which is crucial for anomaly detection and log analysis. Therefore, we need a more efficient and accurate method to cope with these problems. To compensate for the shortcomings of current methods, we propose an innovative fusion model that integrates Isolation Forest, GAN (Generative Adversarial Network), and Transformer with each other, and each of them plays a unique role. Isolation Forest is used to quickly identify anomalous data points, and GAN is used to generate synthetic data with the real data distribution characteristics to augment the training dataset, while the Transformer is used for modeling and context extraction on time series data. The synergy of these three components makes our model more accurate and robust in anomaly detection and log analysis tasks. We validate the effectiveness of this fusion model in an extensive experimental evaluation. Experimental results show that our model significantly improves the accuracy of anomaly detection while reducing the false alarm rate, which helps to detect potential network problems in advance. The model also performs well in the log analysis task and is able to quickly identify anomalous behaviors, which helps to improve the stability of the system. The significance of this study is that it introduces advanced deep learning techniques, which work anomaly detection and log analysis.

Anomaly Detection Model Based on DBN-LR Integrated Learning

An Anomaly Detection Algorithm for the Power Industrial Terminal Security Monitoring

TKS-BLS: Temporal Kernel Stationary Broad Learning System for Enhanced Modeling, Anomaly Detection, and Incremental Learning with Application to Ironmaking Processes

Long Short Term Memory Networks Based Anomaly Detection for KPIs

Accurate Anomaly Detection Leveraging Knowledge-enhanced GAT

Learning Multi-Pattern Normalities in the Frequency Domain for Efficient Time Series Anomaly Detection

An efficient network behavior anomaly detection using a hybrid DBN-LSTM network

Interactive Learning for Network Anomaly Monitoring and Detection with Human Guidance in the Loop

Deep Belief Network-Based Anomaly Recognition Method of Power Supply Service Work Orders

Effect Improved for High-Dimensional and Unbalanced Data Anomaly Detection Model Based on KNN-SMOTE-LSTM

Deep Learning-based Anomaly Detection and Log Analysis for Computer Networks

Anomaly-Based Web Attack Detection: A Deep Learning Approach

Practical and White-Box Anomaly Detection through Unsupervised and Active Learning

Anomaly Detection of Power Plant Equipment Using Long Short-Term Memory Based Autoencoder Neural Network

Equipment anomaly detection method under cloud-edge collaboration model based bi-directional long short-term memory and variational autoencoder

A Data Mining Method Using Deep Learning for Anomaly Detection in Cloud Computing Environment

Little Help Makes a Big Difference: Leveraging Active Learning to Improve Unsupervised Time Series Anomaly Detection

Distributed system anomaly detection using deep learning‐based log analysis

Dual-input anomaly detection method based on deep reinforcement learning

Statistical Learning for Anomaly Detection in Cloud Server Systems: A Multi-Order Markov Chain Framework

Anomaly-Based Web Attack Detection