文章基本信息

标题：A Local Feature Engineering Strategy to Improve Network Anomaly Detection
本地全文：下载
作者：Salvatore Carta ; Alessandro Sebastian Podda ; Diego Reforgiato Recupero 等
期刊名称：Future Internet
电子版ISSN：1999-5903
出版年度：2020
卷号：12
期号：10
页码：177-206
DOI：10.3390/fi12100177
出版社：MDPI Publishing
摘要：The dramatic increase in devices and services that has characterized modern societies in recent decades, boosted by the exponential growth of ever faster network connections and the predominant use of wireless connection technologies, has materialized a very crucial challenge in terms of security. The anomaly-based intrusion detection systems, which for a long time have represented some of the most efficient solutions to detect intrusion attempts on a network, have to face this new and more complicated scenario. Well-known problems, such as the difficulty of distinguishing legitimate activities from illegitimate ones due to their similar characteristics and their high degree of heterogeneity, today have become even more complex, considering the increase in the network activity. After providing an extensive overview of the scenario under consideration, this work proposes a Local Feature Engineering (LFE) strategy aimed to face such problems through the adoption of a data preprocessing strategy that reduces the number of possible network event patterns, increasing at the same time their characterization. Unlike the canonical feature engineering approaches, which take into account the entire dataset, it operates locally in the feature space of each single event. The experiments conducted on real-world data showed that this strategy, which is based on the introduction of new features and the discretization of their values, improves the performance of the canonical state-of-the-art solutions.
关键词：intrusion detection; anomaly detection; networking; data preprocessing; machine learning intrusion detection ; anomaly detection ; networking ; data preprocessing ; machine learning