Title: Deep learning for collective anomaly detection

Authors: Mohiuddin Ahmed; Al-Sakib Khan Pathan

Addresses: Department of ICT and Library Studies, Canberra Institute of Technology, ACT 2601, Australia ' Department of Computer Science and Engineering, Southeast University, Dhaka 1213, Bangladesh

Abstract: Deep learning has been performing well in a number of application domains. Inspired by its popularity in domains such as image processing, speech recognition, etc., in this paper we explore the effectiveness of deep learning and other supervised learning algorithms for collective anomaly detection. Recently, collective anomaly has become popular for denial of service (DoS) attack detection, however, all these approaches are unsupervised in nature and often have high false alarm rate due to being unsupervised. Therefore, to reduce the false alarm rates, we have experimented using the deep learning method which is supervised in nature. Our experimental results on UNSW-NB15 and KDD Cup 1999 datasets show that the deep learning implemented using H₂O achieves ≈97% recall for collective anomaly detection. Deep learning outperforms a wide range of unsupervised techniques for collective anomaly detection. The key insight of this paper is to report the efficiency of deep learning for collective anomaly detection. To the best of our knowledge, this paper is the first one to address the collective anomaly detection problem using deep learning.

Keywords: deep learning; collective anomaly; DoS attack; network; traffic analysis.

DOI: 10.1504/IJCSE.2020.105220

International Journal of Computational Science and Engineering, 2020 Vol.21 No.1, pp.137 - 145

Received: 28 Feb 2018
Accepted: 03 Mar 2018
Published online: 22 Feb 2020 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article