Title
Deep learning for malicious flow detection.
Abstract
Cyber security has grown up to be a hot issue in recent years. How to identify potential malware becomes a challenging task. To tackle this challenge, we adopt deep learning approaches and perform flow detection on real data. However, real data often encounters an issue of imbalanced data distribution which will lead to a gradient dilution issue. When training a neural network, this problem will not only result in a bias toward the majority class but show the inability to learn from the minority classes. In this paper, we propose a Tree-Shaped Deep Neural Network (TSDNN) which classifies the data in a layer-wise manner. To better learn from the minority classes, we propose a Quantity Dependent Backpropagation (QDBP) algorithm which incorporates the knowledge of the disparity between classes. We evaluate our method on an imbalanced data set. Experimental result demonstrates that our approach outperforms the state-of-the-art methods and justifies that the proposed method is able to overcome the difficulty of imbalanced learning. We also conduct a partial flow experiment which shows the feasibility of realtime detection and a zero-shot learning experiment which justifies the generalization capability of deep learning in cyber security.
Year
DOI
Venue
2018
10.1109/pimrc.2017.8292316
personal, indoor and mobile radio communications
DocType
Volume
Citations 
Journal
abs/1802.03358
0
PageRank 
References 
Authors
0.34
5
4
Name
Order
Citations
PageRank
Yun-Chun Chen1162.57
Yu-Jhe Li241.05
Aragorn Tseng300.34
T. Lin472467.09