Search: onr:"swepub:oai:DiVA.org:kth-294023" >
Deep-Feature-Based ...
Deep-Feature-Based Autoencoder Network for Few-Shot Malicious Traffic Detection
-
- He, Mingshu (author)
- Beijing Univ Posts & Telecommun, Sch Elect Engn, Beijing 100876, Peoples R China.
-
- Wang, Xiaojuan (author)
- Beijing Univ Posts & Telecommun, Sch Elect Engn, Beijing 100876, Peoples R China.
-
- Zhou, Junhua (author)
- Beijing Inst Elect Syst Engn, State Key Lab Intelligent Mfg Syst Technol, Beijing 100854, Peoples R China.
-
show more...
-
- Xi, Yuanyuan (author)
- KTH,Skolan för elektroteknik och datavetenskap (EECS)
-
- Jin, Lei (author)
- Beijing Univ Posts & Telecommun, Sch Elect Engn, Beijing 100876, Peoples R China.
-
- Wang, Xinlei (author)
- Beijing Univ Posts & Telecommun, Sch Elect Engn, Beijing 100876, Peoples R China.
-
show less...
-
Beijing Univ Posts & Telecommun, Sch Elect Engn, Beijing 100876, Peoples R China Beijing Inst Elect Syst Engn, State Key Lab Intelligent Mfg Syst Technol, Beijing 100854, Peoples R China. (creator_code:org_t)
- Hindawi Limited, 2021
- 2021
- English.
-
In: Security and Communication Networks. - : Hindawi Limited. - 1939-0114 .- 1939-0122. ; 2021
- Related links:
-
https://doi.org/10.1...
-
show more...
-
https://downloads.hi...
-
https://urn.kb.se/re...
-
https://doi.org/10.1...
-
show less...
Abstract
Subject headings
Close
- With the increase of Internet visits and connections, it is becoming essential and arduous to protect the networks and different devices of the Internet of Things (IoT) from malicious attacks. The intrusion detection systems (IDSs) based on supervised machine learning (ML) methods require a large number of labeled samples. However, the number of abnormal behaviors is far less than that of normal behaviors, let alone that the shots of malicious behavior samples which can be intercepted as training dataset are actually limited. Consequently, it is a key research topic to conduct the anomaly detection for the small number of abnormal behavior samples. This paper proposes an anomaly detection model with a few abnormal samples to solve the problem in few-shot detection based on convolutional neural networks (CNN) and autoencoder (AE). This model mainly consists of the CNN-based supervised pretraining module and the AE-based data reconstruction module. Only a few abnormal samples are utilized to the pretrain module to build the structure of extracting deep features. The data reconstruction module simply chooses the deep features of normal samples as training data. There also exist some effective attention mechanisms in the pretraining module. Through the pretraining of small samples, the accuracy of abnormal detection is improved compared with merely training normal samples with AE. The simulation results prove that this solution can solve the above problems occurring in network behavior anomaly detection. In comparison to the original AE model and other clustering methods, the proposed model advances the detection results in a visible way.
Subject headings
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
Publication and Content Type
- ref (subject category)
- art (subject category)
Find in a library
To the university's database