A DOUBLE-SHRINK AUTOENCODER FOR NETWORK ANOMALY DETECTION

Authors

  • Cong Thanh Bui Hi-tech Telecommunication Center, Communications Command
  • Loi Cao Van Faculty of Information Technology, Le Quy Don Technical University
  • Minh Hoang Institute of Science Technology and Innovation
  • Quang Uy Nguyen Faculty of Information Technology, Le Quy Don Technical University

DOI:

https://doi.org/10.15625/1813-9663/36/2/14578

Keywords:

Deep learning, AutoEncoders, Anomaly detection, Latent representation

Abstract

The rapid development of the Internet and the wide spread of its applications has affected many aspects of our life. However, this development also makes the cyberspace more vulnerable to various attacks. Thus, detecting and preventing these attacks are crucial for the next development of the Internet and its services. Recently, machine learning methods have been widely adopted in detecting network attacks. Among many machine learning methods, AutoEncoders (AEs) are known as the state-of-the-art techniques for network anomaly detection. Although, AEs have been successfully applied to detect many types of attacks, it is often unable to detect some difficult attacks that attempt to mimic the normal network traffic. In order to handle this issue, we propose a new model based on AutoEncoder called Double-Shrink AutoEncoder (DSAE). DSAE put more shrinkage on the normal data in the middle hidden layer. This helps to pull out some anomalies that are very similar to normal data. DSAE are evaluated on six well-known network attacks datasets. The experimental results show that our model performs competitively to the state-of-the-art model, and often out-performs this model on the attacks group that is difficult for the previous methods.

Metrics

Metrics Loading ...

Downloads

Published

2020-05-11

How to Cite

[1]
C. T. Bui, L. C. Van, M. Hoang, and Q. U. Nguyen, “A DOUBLE-SHRINK AUTOENCODER FOR NETWORK ANOMALY DETECTION”, JCC, vol. 36, no. 2, p. 159–172, May 2020.

Issue

Section

Articles