TTANAD:测试时间增长用于网络异常检测
Seffi Cohen1, Niv Goldshlager1, Bracha Shapira1
1Software and Information Systems Engineering, Ben-Gurion University, Beer Sheva P.O. Box 653, Israel.
Entropy (Basel, Switzerland)
|May 27, 2023
概括
本研究介绍了网络异常检测 (TTANAD) 的测试时间增强,以改进基于机器学习的入侵检测. TTANAD 增强了网络流量分析,大大提高了各种数据集和算法的检测准确度.
科学领域:
- 网络安全 网络安全
- 机器学习 机器学习
- 网络安全 网络安全
背景情况:
- 基于机器学习的网络入侵检测系统 (NIDS) 对于网络保护至关重要.
- 先进的攻击越来越多地通过模仿合法流量来逃避传统的NIDS.
研究的目的:
- 引入一种新的以数据为中心的方法,即网络异常检测测试验时间增长 (TTANAD).
- 通过在推理过程中改进数据表示来提高NIDS的性能.
主要方法:
- TTANAD利用对网络流量数据的时间测试时间增强.
- 这种方法为异常检测算法生成交通数据的多种观点.
- 它旨在与各种现有的异常检测算法兼容.
主要成果:
- 与基线方法相比,TTANAD在所有基准数据集中表现出优越的性能.
- 提出的方法始终提高了检测准确度,用ROC曲线下的面积 (AUC) 度量来衡量.
- 在多个异常检测算法中验证了有效性.
结论:
- 通过专注于数据增强,TTANAD在网络异常检测方面取得了重大进展.
- 这种方法提高了NIDS对复杂网络攻击的稳定性和准确性.
- TTANAD为改善网络安全提出了一种多功能且有效的战略.
更多相关视频
相关概念视频
Survival Tree
123
Survival trees are a non-parametric method used in survival analysis to model the relationship between a set of covariates and the time until an event of interest occurs, often referred to as the "time-to-event" or "survival time." This method is particularly useful when dealing with censored data, where the event has not occurred for some individuals by the end of the study period, or when the exact time of the event is unknown.
Building a Survival Tree
Constructing a...
Building a Survival Tree
Constructing a...
123
Detection of Gross Error: The Q Test
6.3K
When one or more data points appear far from the rest of the data, there is a need to determine whether they are outliers and whether they should be eliminated from the data set to ensure an accurate representation of the measured value. In many cases, outliers arise from gross errors (or human errors) and do not accurately reflect the underlying phenomenon. In some cases, however, these apparent outliers reflect true phenomenological differences. In these cases, we can use statistical methods...
6.3K
Quantifying and Rejecting Outliers: The Grubbs Test
1.7K
Sometimes, a data set can have a recorded numerical observation that greatly deviates from the rest of the data. Assuming that the data is normally distributed, a statistical method called the Grubbs test can be used to determine whether the observation is truly an outlier. To perform a two-tailed Grubbs test, first, calculate the absolute difference between the outlier and the mean. Then, calculate the ratio between this difference and the standard deviation of the sample. This...
1.7K
Wald-Wolfowitz Runs Test II
287
The Wald-Wolfowitz runs test, commonly referred to as the runs test, is a nonparametric test used to assess the randomness of ordered data. The test evaluates the number of runs, which are consecutive sequences of similar elements within the data. If the number of runs is significantly higher or lower than expected, the data is considered non-random, indicating a detectable pattern or structure.
For binary data, runs are identified using symbols such as + and −, or equivalently, 1s and...
For binary data, runs are identified using symbols such as + and −, or equivalently, 1s and...
287
Randomized Experiments
7.1K
The randomization process involves assigning study participants randomly to experimental or control groups based on their probability of being equally assigned. Randomization is meant to eliminate selection bias and balance known and unknown confounding factors so that the control group is similar to the treatment group as much as possible. A computer program and a random number generator can be used to assign participants to groups in a way that minimizes bias.
Simple randomization
Simple...
Simple randomization
Simple...
7.1K


