• KSII Transactions on Internet and Information Systems
    Monthly Online Journal (eISSN: 1976-7277)

A Novel Network Anomaly Detection Method based on Data Balancing and Recursive Feature Addition


Abstract

Network anomaly detection system plays an essential role in detecting network anomaly and ensuring network security. Anomaly detection system based machine learning has become an increasingly popular solution. However, due to the unbalance and high-dimension characteristics of network traffic, the existing methods unable to achieve the excellent performance of high accuracy and low false alarm rate. To address this problem, a new network anomaly detection method based on data balancing and recursive feature addition is proposed. Firstly, data balancing algorithm based on improved KNN outlier detection is designed to select part respective data on each category. Combination optimization about parameters of improved KNN outlier detection is implemented by genetic algorithm. Next, recursive feature addition algorithm based on correlation analysis is proposed to select effective features, in which a cross contingency test is utilized to analyze correlation and obtain a features subset with a strong correlation. Then, random forests model is as the classification model to detection anomaly. Finally, the proposed algorithm is evaluated on benchmark datasets KDD Cup 1999 and UNSW_NB15. The result illustrates the proposed strategies enhance accuracy and recall, and decrease the false alarm rate. Compared with other algorithms, this algorithm still achieves significant effects, especially recall in the small category.


Statistics

Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2015)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article

[IEEE Style]
X. Liu, J. Ren, H. He, Q. Wang and S. Sun, "A Novel Network Anomaly Detection Method based on Data Balancing and Recursive Feature Addition," KSII Transactions on Internet and Information Systems, vol. 14, no. 7, pp. 3093-3115, 2020. DOI: 10.3837/tiis.2020.07.020.

[ACM Style]
Xinqian Liu, Jiadong Ren, Haitao He, Qian Wang, and Shengting Sun. 2020. A Novel Network Anomaly Detection Method based on Data Balancing and Recursive Feature Addition. KSII Transactions on Internet and Information Systems, 14, 7, (2020), 3093-3115. DOI: 10.3837/tiis.2020.07.020.

[BibTeX Style]
@article{tiis:23731, title="A Novel Network Anomaly Detection Method based on Data Balancing and Recursive Feature Addition", author="Xinqian Liu and Jiadong Ren and Haitao He and Qian Wang and Shengting Sun and ", journal="KSII Transactions on Internet and Information Systems", DOI={10.3837/tiis.2020.07.020}, volume={14}, number={7}, year="2020", month={July}, pages={3093-3115}}