Title
Multi-Type Anomaly Detection Based On Raw Network Traffic
Abstract
In this article, we presented a visualization method for representing network traffic features using raw data of it. The raw network traffic data was divided into regulated segments. By employing a supervised neural network and an expert-knowledge based labeling method, model training was conducted based on a dataset covering two weeks' network traffic, where the first week's data was employed as the training set and the second week's data was used as the validation set. At last, we achieved validation precision scores of 0.980 for detecting the ARP flooding, 0.800 and 0.815 for detecting the malicious SMB and TCP SYN flooding respectively.
Year
DOI
Venue
2021
10.1109/CCNC49032.2021.9369654
2021 IEEE 18TH ANNUAL CONSUMER COMMUNICATIONS & NETWORKING CONFERENCE (CCNC)
Keywords
DocType
ISSN
anomaly detection, raw network traffic, neural network, machine learning, cybersecurity
Conference
2331-9852
Citations 
PageRank 
References 
0
0.34
0
Authors
3
Name
Order
Citations
PageRank
Yuwei Sun122.78
Hideya Ochiai233.13
Hiroshi Esaki320.75