Abstract:With the application and development of Internet technology, network traffic is growing rapidly, and the situation of network security is becoming more and more serious. As an important way to protect network security, abnormal traffic detection has been paid more and more attention. In this paper, the uncertainty of the samples in the abnormal traffic detection dataset is studied. Combining the three-way decision idea with the random forest algorithm, a three-way selection random forest optimization model for abnormal traffic detection is proposed. Firstly, the three-way decision idea is integrated into the random selection process of feature attributes, and the attribute importance based on decision boundary entropy is calculated. The feature attributes are divided into the normal domain, abnormal domain, and uncertain domain, and the three-way attribute random selection rules are designed to randomly select the feature attributes that conform to the rules from different domains. Secondly, the classifier evaluation function is constructed by combining pure accuracy and diversity, and the anomaly traffic detection base classifier with a high evaluation value is selected for integration to eliminate the unstable factors caused by randomness in the process of base classifier generation. Thirdly, the optimal node weight combination of the base classifier is obtained by iterative calculation of the gray wolf optimization algorithm to further improve the prediction effect and robustness of the model. Finally, the model is applied to the abnormal traffic detection dataset. The experimental results show that the prediction accuracy of the three-way selection random forest optimization model on CIC-IDS2017, KDDCUP99, and NSLKDD datasets is 96.1%, 95.2%, and 95.3%, respectively, which has a better detection effect than other machine learning algorithms.

Network traffic anomaly detection model based on feature grouping and multi‐autoencoders integration

Auto-AD: Autonomous Hyperspectral Anomaly Detection Network Based on Fully Convolutional Autoencoder

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

A multi-information fusion anomaly detection model based on convolutional neural networks and AutoEncoder

Abnormal Traffic Detection: Traffic Feature Extraction and DAE-GAN With Efficient Data Augmentation

Network Traffic Anomaly Detection Method Based on Multi scale Residual Feature

A many-objective integrated evolutionary algorithm for feature selection in anomaly detection

A multi-channel anomaly detection method with feature selection and multi-scale analysis

Hyperspectral Anomaly Detection with Auto-Encoder and Independent Target

Spatio-Temporal Network Traffic Estimation and Anomaly Detection Based on Convolutional Neural Network in Vehicular Ad-Hoc Networks

Network Anomaly Traffic Detection via Multi-view Feature Fusion

Graph autoencoder with mirror temporal convolutional networks for traffic anomaly detection

An Encrypted Malicious Traffic Detection System Based on Neural Network

Clustering-Based Deep Autoencoders for Network Anomaly Detection

Three-Way Selection Random Forest Optimization Model for Anomaly Traffic Detection

Unsupervised Anomalous Traffic Detection Based on Cascading Representation and Multiple-Clustering

TA-NET: Empowering Highly Efficient Traffic Anomaly Detection Through Multi-Head Local Self-Attention and Adaptive Hierarchical Feature Reconstruction

Anomalous Network Traffic Detection Method Based on an Elevated Harris Hawks Optimization Method and Gated Recurrent Unit Classifier

Online Network traffic anomaly detection method combining OS-ELM and SADE

Multi-task learning for IoT traffic classification: A comparative analysis of deep autoencoders

Abnormal Traffic Detection Based on Generative Adversarial Network and Feature Optimization Selection