返回
Versatile unsupervised anomaly detection method for RTE-based networks
DOI:10.1016/j.eswa.2022.117751.png)
摘要
En 中文
Reliability and dependability are critical demands of the fourth industrial revolution that Real-time Ethernet (RTE) networks have to meet. The use of anomaly detection and prevention techniques can further enhance existing RTE networks. This work presents a general and efficient anomaly detection strategy based on machine learning techniques. The proposal is of general purpose since only normal (i.e not anomalous) traffic data and statistical features are used during the training phase of the classifier. These features are derived from data sets extracted from unsupervised traffic data using a sliding window algorithm. The efficiency of the proposal depends on the proper selection of the sliding window algorithm' parameters. In this work, an optimization strategy appropriately selects the algorithm's step and window size. An Adapted Correlation based on Feature Selection indicates the most relevant features reducing the data dimensionality, improving classifier performance and efficiency. Finally, a One-Class Support Vector Machine algorithm is trained and used for classifying the traffic data sets. The authors applied the proposed anomaly detection strategy in real network data (PROFINET and Ethernet/IP Networks). The results demonstrate the proposal's efficiency and accuracy.
Keyword:
OCSVM classifier
Differential evolution
PROFINET
Ethernet/IP
Anomaly detection
期刊
IF:
7.5
论文数:
2.9W
被引数:
10.2W
机构
引用论文
Unsupervised learning by probabilistic latent semantic analysis基于概率潜在语义分析的无监督学习
MACHINE LEARNING
IF2.9

