Paper Info
Title
Network Anomaly Detection Using Unsupervised Feature Selection and Density Peak Clustering.
Abstract
Intrusion detection systems (IDSs) play a significant role to effectively defend our crucial computer systems or networks against attackers on the Internet. Anomaly detection is an effective way to detect intrusion, which can discover patterns that do not conform to expected behavior. The mainstream approaches of ADS (anomaly detection system) are using data mining technology to automatically extract normal pattern and abnormal ones from a large set of network data and distinguish them from each other. However, supervised or semi-supervised approaches in data mining rely on data label information. This is not practical when the network data is large-scale. In this paper, we propose a two-stage approach, unsupervised feature selection and density peak clustering to tackle label lacking situations. First, the density-peak based clustering approach is introduced for network anomaly detection, which considers both distance and density nature of data. Second, to achieve better performance of clustering process, we use maximal information coefficient and feature clustering to remove redundant and irrelevant features. Experimental results show that our method can get rid of useless features of high-dimensional data and achieves high detection accuracy and efficiency in the meanwhile.
Year
DOI
Venue
2016
10.1007/978-3-319-39555-5_12
Lecture Notes in Computer Science
Keywords
Field
DocType
Anomaly detection,Data mining,Feature selection,Maximal information coefficient,Density peak clustering
Anomaly detection,Intrusion,Feature selection,Pattern recognition,Computer science,Artificial intelligence,Network data,Maximal information coefficient,Cluster analysis,Intrusion detection system,The Internet
Conference
Volume
ISSN
Citations 
9696
0302-9743
2
PageRank 
References 
Authors
0.38
17
4
Name
Order
Citations
PageRank
Xiejun Ni120.38
Daojing He2101358.40
Sammy Chan390266.93
Farooq Ahmad415820.25