{"title":"基于堆叠稀疏收缩变分自编码器和不平衡XGBoost的网络异常检测","authors":"Jing Bi;Ziyue Guan;Haitao Yuan;Jinhong Yang;Jia Zhang","doi":"10.1109/TSUSC.2024.3390003","DOIUrl":null,"url":null,"abstract":"Efficient and accurate identification of network anomalies is significant to network security systems. It is highly challenging to detect abnormal behaviors in the increasing network data accurately. Currently, classification methods based on feature extraction of autoencoders have been proven to be suitable for network anomaly detection. However, traditional detection models with autoencoders have unsatisfying detection accuracy in the face of massive network features. In addition, the hyperparameter optimization of their models cannot be effectively solved. In this letter, based on the improvement of variational autoencoders, stacked sparse shrink variational autoencoders (S3VAEs) are designed. In addition, an <underline>U</u>nbalanced <underline>X</u>GBoost classifier based on <underline>G</u>enetic simulated annealing particle swarm optimization (UXG) is proposed. Finally, the feature extractor of S3VAEs is combined with the UXG classifier, and the anomaly detection model is obtained. Experimental results based on four real-life data sets demonstrate that the proposed anomaly detection model achieves higher classification accuracy and F1 than several state-of-the-art algorithms.","PeriodicalId":13268,"journal":{"name":"IEEE Transactions on Sustainable Computing","volume":"10 1","pages":"28-38"},"PeriodicalIF":3.0000,"publicationDate":"2024-04-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Network Anomaly Detection With Stacked Sparse Shrink Variational Autoencoders and Unbalanced XGBoost\",\"authors\":\"Jing Bi;Ziyue Guan;Haitao Yuan;Jinhong Yang;Jia Zhang\",\"doi\":\"10.1109/TSUSC.2024.3390003\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Efficient and accurate identification of network anomalies is significant to network security systems. It is highly challenging to detect abnormal behaviors in the increasing network data accurately. Currently, classification methods based on feature extraction of autoencoders have been proven to be suitable for network anomaly detection. However, traditional detection models with autoencoders have unsatisfying detection accuracy in the face of massive network features. In addition, the hyperparameter optimization of their models cannot be effectively solved. In this letter, based on the improvement of variational autoencoders, stacked sparse shrink variational autoencoders (S3VAEs) are designed. In addition, an <underline>U</u>nbalanced <underline>X</u>GBoost classifier based on <underline>G</u>enetic simulated annealing particle swarm optimization (UXG) is proposed. Finally, the feature extractor of S3VAEs is combined with the UXG classifier, and the anomaly detection model is obtained. Experimental results based on four real-life data sets demonstrate that the proposed anomaly detection model achieves higher classification accuracy and F1 than several state-of-the-art algorithms.\",\"PeriodicalId\":13268,\"journal\":{\"name\":\"IEEE Transactions on Sustainable Computing\",\"volume\":\"10 1\",\"pages\":\"28-38\"},\"PeriodicalIF\":3.0000,\"publicationDate\":\"2024-04-16\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"IEEE Transactions on Sustainable Computing\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://ieeexplore.ieee.org/document/10500883/\",\"RegionNum\":3,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q2\",\"JCRName\":\"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Transactions on Sustainable Computing","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/10500883/","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q2","JCRName":"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE","Score":null,"Total":0}
Network Anomaly Detection With Stacked Sparse Shrink Variational Autoencoders and Unbalanced XGBoost
Efficient and accurate identification of network anomalies is significant to network security systems. It is highly challenging to detect abnormal behaviors in the increasing network data accurately. Currently, classification methods based on feature extraction of autoencoders have been proven to be suitable for network anomaly detection. However, traditional detection models with autoencoders have unsatisfying detection accuracy in the face of massive network features. In addition, the hyperparameter optimization of their models cannot be effectively solved. In this letter, based on the improvement of variational autoencoders, stacked sparse shrink variational autoencoders (S3VAEs) are designed. In addition, an Unbalanced XGBoost classifier based on Genetic simulated annealing particle swarm optimization (UXG) is proposed. Finally, the feature extractor of S3VAEs is combined with the UXG classifier, and the anomaly detection model is obtained. Experimental results based on four real-life data sets demonstrate that the proposed anomaly detection model achieves higher classification accuracy and F1 than several state-of-the-art algorithms.