TY  - JOUR
AU  - PING, Guolou
AU  - ZENG, Tingyu
AU  - YE, Xiaojun
PY  - 2022
TI  - Unsupervised network traffic anomaly detection based on score iterations
JO  - Journal of Tsinghua University (Science and Technology)
SN  - 1000-0054
SP  - 819
EP  - 824
VL  - 62
IS  - 5
AB  - Network traffic anomaly detection is limited by the lack of annotation information in the traffic. This paper presents an unsupervised anomaly detection method based on score iterations that overcomes this limitation. An autoencoder based anomaly score iteration process was designed to learn generic anomaly features to determine an initial anomaly score. A deep ordinal regression model based anomaly score iteration process was then designed to learn discriminative anomaly features to further improve the anomaly score accuracy. Deep models, multi-view features and ensemble learning are also used to improve the detection accuracy. Tests on several datasets show that this method has significant advantages over other methods in the absence of annotation information and can be effectively applied to network traffic anomaly detection.
UR  - https://doi.org/10.16511/j.cnki.qhdxxb.2021.21.045
DO  - 10.16511/j.cnki.qhdxxb.2021.21.045