Abstract:The contributions of the paper are as follows: The introduction of an ensemble learning‐based stacking classifier for anomaly detection in communication network traffic. The utilization of base classifiers such as K‐nearest neighbour (KNN), logistic regression (LR), Naive Bayes (NB), and decision tree (DT), with Support Vector Machines (SVM) as a meta‐classifier for anomaly detection. A comprehensive comparison of accuracy, precision, recall, and F‐measure between the proposed model and individual models, including KNN, NB, DT, LDA, LR, and SVM. In recent years, the internet has not only enhanced the quality of our lives but also made us susceptible to high‐frequency cyber‐attacks on communication networks. Detecting such attacks on network traffic is made possible by intrusion detection systems (IDS). IDSs can be broadly divided into two groups based on the type of detection they provide. According to the established rules, the first signature‐based IDS detects threats. Secondly, anomaly‐based IDS detects abnormal conditions in the network. Various machine and deep learning approaches have been used to detect anomalies in network traffic in the past. To improve the detection of anomalies in network traffic, researchers have compared several machine learning models, such as support vector machines (SVM), logistic regressions (LRs), K‐Nearest Neighbour (KNN), Nave Bayes (NBs), and boosting algorithms. The accuracy, precision, and recall of many studies have been satisfactory to an extent. Therefore, this paper proposes an ensemble learning‐based stacking classifier (ELSC) to achieve a better accuracy rate. In the proposed ELSC algorithm, KNN, NB, LR, and Decision Trees (DT) served as the base classifiers, while SVM served as the meta classifier. Based on a Network Intrusion detection dataset provided by Kaggle.com, ELSC is compared to base classifiers such as KNN, NB, LR, DT, SVM, and Linear Discriminate Analysis. As a result of the simulations, the proposed ELBS stacking classifier was found to outperform the other comparative models and converge with an accuracy of 99.4%.

Internet Routing Anomaly Detection Using LSTM Based Autoencoder

Anomalous State Recognition of Lane-changing Behavior Using a Hybrid Autoencoder Architecture

Reconstruction-based LSTM-Autoencoder for Anomaly-based DDoS Attack Detection over Multivariate Time-Series Data

A Bi-LSTM Autoencoder Framework for Anomaly Detection -- A Case Study of a Wind Power Dataset

Anomaly detection system for network transport with machine learning approach

An Enhancing Timeseries Anomaly Detection Using LSTM and Bi-LSTM Architectures

Denoising Architecture for Unsupervised Anomaly Detection in Time-Series

Anomaly detection in groundwater monitoring data using LSTM-Autoencoder neural networks

LSTM-based Encoder-Decoder for Multi-sensor Anomaly Detection

LSTM-Autoencoder Deep Learning Model for Anomaly Detection in Electric Motor

Network Traffic Anomaly Detection Using Recurrent Neural Networks

Deep Sequence Modeling for Anomalous ISP Traffic Prediction

Machine Learning for Real-Time Anomaly Detection in Optical Networks

TSMAE: A Novel Anomaly Detection Approach for Internet of Things Time Series Data Using Memory-Augmented Autoencoder

Practical autoencoder based anomaly detection by using vector reconstruction error

Using LSTM encoder-decoder algorithm for detecting anomalous ADS-B messages

Multi-task learning for IoT traffic classification: A comparative analysis of deep autoencoders

Autoencoder-based Unsupervised Intrusion Detection using Multi-Scale Convolutional Recurrent Networks

Detecting Web Attacks From HTTP Weblogs Using Variational LSTM Autoencoder Deviation Network

LSTM-Autoencoder based Anomaly Detection for Indoor Air Quality Time Series Data

Anomaly detection in network traffic with ELSC learning algorithm