Title
Revisit network anomaly ranking in datacenter network using re-ranking
Abstract
With the continuous growth of modern datacenter networks in recent years, network intrusions targeting those datacenters have also been growing rapidly. In this situation, system monitoring and intrusion detection become essential to control the risks of such networks. There are many network anomaly detection systems being used to identify significant anomalies in datacenter networks. However, they often focus on detecting significant anomalies, while ignoring insignificant anomalies oftentimes. Existing anomaly ranking models are not accurate in detecting insignificant anomalies. This becomes an issue when attacks are from insignificant anomaly traffic. In this paper, we revisit the network anomaly ranking problem and propose a re-ranking model based on a commonly used unsupervised network anomaly ranking method. We introduce several new features into the re-ranking model to capture extra information about outliers. Our experimental results based on real datacenter network data demonstrate that the proposed re-ranking model improves the ranking quality over the unsupervised method, especially for insignificant outliers.
Year
DOI
Venue
2015
10.1109/CloudNet.2015.7335302
CLOUDNET
Field
DocType
ISSN
Anomaly detection,Data mining,Ranking,Computer science,Outlier,System monitoring,Network data,Artificial intelligence,Intrusion detection system,Machine learning
Conference
2374-3239
Citations 
PageRank 
References 
0
0.34
12
Authors
6
Name
Order
Citations
PageRank
Shaohan Huang15710.29
Carol J. Fung223925.24
Kui Wang300.34
Yaqi Yang400.34
Zhongzhi Luan514044.73
Depei Qian639189.29