First Author:Dongqi Wang
Co author:Mingshuo Nie,Dongming Chen
Journal:Mathematics
Issue:15
Volume:11
Abstract:In this paper, we propose an outlier-detection algorithm for detecting network traffic anomalies based on a clustering algorithm and an autoencoder model. The BIRCH clustering algorithm is employed as the pre-algorithm of the autoencoder to pre-classify datasets with complex data distribution characteristics, while the autoencoder model is used to detect outliers based on a threshold. The proposed BIRCH-Autoencoder (BAE) algorithm has been tested on four network security datasets, KDDCUP99, UNSW-NB15, CICIDS2017, and NSL-KDD, and compared with representative algorithms. The BAE algorithm achieved average F-scores of 96.160, 81.132, and 91.424 on the KDDCUP99, UNSW-NB15, and CICIDS2017 datasets, respectively. These experimental results demonstrate that the proposed approach can effectively and accurately detect anomalous data.
Key Words:Pre-classification; BIRCH; Autoencoder; anomaly detection
Indexed by:SCI JCR Q1
Discipline:Engineering
Document Type:JCR 一区
First-Level Discipline:Computer Science and Technology
Page Number:3398-3411
Translation or Not:no