Title
An interactive visual analytics approach for network anomaly detection through smart labeling.
Abstract
Network anomaly detection is an important means for safeguarding network security. On account of the difficulties encountered in traditional automatic detection methods such as lack of labeled data, expensive retraining costs for new data and non-explanation, we propose a novel smart labeling method, which combines active learning and visual interaction, to detect network anomalies through the iterative labeling process of the users. The algorithms and the visual interfaces are tightly integrated. The network behavior patterns are first learned by using the self-organizing incremental neural network. Then, the model uses a Fuzzy c-means-based algorithm to do classification on the basis of user feedback. After that, the visual interfaces are updated to present the improved results of the model, which can help users to choose meaningful candidates, judge anomalies and understand the model results. The experiments show that compared to labeling without our visualizations, our method can achieve a high accuracy rate of anomaly detection with fewer labeled samples.
Year
DOI
Venue
2019
10.1007/s12650-019-00580-7
Journal of Visualization
Keywords
Field
DocType
Anomaly detection, Interactive labeling, Visual analysis
Anomaly detection,Computer vision,Visual analytics,Optics,Artificial intelligence,Physics
Journal
Volume
Issue
ISSN
22
5
1343-8875
Citations 
PageRank 
References 
1
0.35
0
Authors
5
Name
Order
Citations
PageRank
Xin Fan1776104.55
Chenlu Li284.52
Xiaoru Yuan3115770.28
Xiaoju Dong465.18
Jie Liang58610.85