Journal of System Simulation
Abstract
Abstract: Aiming at the poor detection performances caused by the low feature extraction accuracy of rare traffic attacks from scarce samples, a network traffic anomaly detection method for imbalanced data is proposed. A traffic anomaly detection model is designed, in which the traffic features in different feature spaces are learned by alternating activation functions, architectures, corrupted rates and dropout rates of stacked denoising autoencoder (SDA), and the low accuracy in extracting features of rare traffic attacks in a single space is solved. A batch normalization algorithm is designed, and the Adam algorithm is adopted to train parameters of SDAs to extract multifarious traffic features. The Softmax classifier is trained by combining the extracted features, so that the rare traffic attacks can be detected with a high detection precision. The experimental results show that, compared with the methods based on random forest, single SDA and feature fusion, the proposed method has higher classification accuracy, higher detection rate of rare traffic attacks and the detection performances are stable.
Recommended Citation
Dong, Shuqin and Zhang, Bin
(2021)
"Network Traffic Anomaly Detection Method for Imbalanced Data,"
Journal of System Simulation: Vol. 33:
Iss.
3, Article 17.
DOI: 10.16182/j.issn1004731x.joss.19-0573
Available at:
https://dc-china-simulation.researchcommons.org/journal/vol33/iss3/17
First Page
679
Revised Date
2020-01-17
DOI Link
https://doi.org/10.16182/j.issn1004731x.joss.19-0573
Last Page
689
CLC
TP393;TP391
Recommended Citation
Dong Shuqin, Zhang Bin. Network Traffic Anomaly Detection Method for Imbalanced Data[J]. Journal of System Simulation, 2021, 33(3): 679-689.
DOI
10.16182/j.issn1004731x.joss.19-0573
Included in
Artificial Intelligence and Robotics Commons, Computer Engineering Commons, Numerical Analysis and Scientific Computing Commons, Operations Research, Systems Engineering and Industrial Engineering Commons, Systems Science Commons