Abstract:With the rapid development of network technology, the Internet has brought significant convenience to various sectors of society, holding a prominent position. Due to the unpredictable and severe consequences resulting from malicious attacks, the detection of anomalous network traffic has garnered considerable attention from researchers over the past few decades. Accurately labeling a sufficient amount of network traffic data as a training dataset within a short period of time is a challenging task, given the rapid and massive generation of network traffic data. Furthermore, the proportion of malicious attack traffic is relatively small compared to the overall traffic data, and the distribution of traffic data across different types of malicious attacks also varies significantly. To address the aforementioned challenges, this paper presents a novel network anomaly detection algorithm based on semi-supervised learning and adaptive multiclass balancing. Building upon the assumption of consistent distribution between labeled and unlabeled data, this paper introduces the multiclass split balancing strategy and the adaptive confidence threshold function. These innovative approaches aim to tackle the issue of the multiclass imbalanced in traffic data. By leveraging the mutually beneficial relationship between semi-supervised learning and ensemble learning, this paper presents the collaborative rotation forest algorithm. This algorithm is specifically designed to enhance performance of anomaly detection in an environment with label inadequacy. Several comparative experiments conducted on the NSL-KDD, UNSW-NB15, and ToN-IoT demonstrate that the proposed algorithm achieves significant improvements in performance. Specifically, it enhances precision by 1.5–5.7%, recall by 1.5−5.7%, and F-Measure by 1.4−4.3% compared to the state-of-the-art algorithms.

Supervised Fine-Tuning for Unsupervised KPI Anomaly Detection for Mobile Web Systems

Robust and Unsupervised KPI Anomaly Detection Based on Highly Sensitive Conditional Variational Auto-Encoders.

Little Help Makes a Big Difference: Leveraging Active Learning to Improve Unsupervised Time Series Anomaly Detection

Opprentice: Towards Practical And Automatic Anomaly Detection Through Machine Learning

Rapid Deployment of Anomaly Detection Models for Large Number of Emerging KPI Streams.

Practical and White-Box Anomaly Detection through Unsupervised and Active Learning

Decoupling Detectors for Scalable Anomaly Detection in AIoT Systems with Multiple Machines

CellPAD - Detecting Performance Anomalies in Cellular Networks via Regression Analysis.

Human-machine interactive streaming anomaly detection by online self-adaptive forest

Efficient KPI Anomaly Detection Through Transfer Learning for Large-Scale Web Services

A network anomaly detection algorithm based on semi-supervised learning and adaptive multiclass balancing

Unsupervised Anomaly Detection for Intricate KPIs via Adversarial Training of VAE

Enhancing Anomaly Detection Models for Industrial Applications through SVM-Based False Positive Classification

End-to-End Augmentation Hyperparameter Tuning for Self-Supervised Anomaly Detection

Adaptive Performance Anomaly Detection for Online Service Systems via Pattern Sketching

Robust KPI Anomaly Detection for Large-Scale Software Services with Partial Labels

Interactive Learning for Network Anomaly Monitoring and Detection with Human Guidance in the Loop

A model fine-tuning approach for robust anomaly detection and isolation in multi-sensor system of nuclear power plants

Mobile Internet Quality Estimation using Self-Tuning Kernel Regression

Multi-Scale Convolutional LSTM with Transfer Learning for Anomaly Detection in Cellular Networks

Practical Anomaly Detection over Multivariate Monitoring Metrics for Online Services