Unsupervised network traffic anomaly detection with deep autoencoders. (24th February 2022)

• Record Type: Journal Article
• Authors: Dutta, Vibekananda; Pawlicki, Marek; Kozik, Rafał; Choraś, Michał
• Is Part Of: Logic journal of the IGPL. Volume 30:Number 6(2022)
• Page Start: 912
• Page End: 925
• Publication Date: 2022-02-24
• Subjects: Machine learning -- deep learning -- cybersecurity -- intrusion detection system -- autoencoder -- deep neural network; Logic, Symbolic and mathematical -- Periodicals; 511.3
• DOI: 10.1093/jigpal/jzac002
• Languages: English
• ISSNs: 1367-0751

Abstract

Abstract: Contemporary Artificial Intelligence methods, especially their subset-deep learning, are finding their way to successful implementations in the detection and classification of intrusions at the network level. This paper presents an intrusion detection mechanism that leverages Deep AutoEncoder and several Deep Decoders for unsupervised classification. This work incorporates multiple network topology setups for comparative studies. The efficiency of the proposed topologies is validated on two established benchmark datasets: UNSW-NB15 and NetML-2020. The results of their analysis are discussed in terms of classification accuracy, detection rate, false-positive rate, negative predictive value, Matthews correlation coefficient and F1-score. Furthermore, comparing against the state-of-the-art methods used for network intrusion detection is also disclosed.