A Survey of Outlier Detection Methods in Network Anomaly Identification

Citations Over TimeTop 1% of 2011 papers

Abstract

The detection of outliers has gained considerable interest in data mining with the realization that outliers can be the key discovery to be made from very large databases. Outliers arise due to various reasons such as mechanical faults, changes in system behavior, fraudulent behavior, human error and instrument error. Indeed, for many applications the discovery of outliers leads to more interesting and useful results than the discovery of inliers. Detection of outliers can lead to identification of system faults so that administrators can take preventive measures before they escalate. It is possible that anomaly detection may enable detection of new attacks. Outlier detection is an important anomaly detection approach. In this paper, we present a comprehensive survey of well-known distance-based, density-based and other techniques for outlier detection and compare them. We provide definitions of outliers and discuss their detection based on supervised and unsupervised learning in the context of network anomaly detection.

Related Papers

• Dual-regularized multi-view outlier detection(2015)
• → Towards Experienced Anomaly Detector Through Reinforcement Learning(2018)56 cited
• → Why is this an anomaly? Explaining anomalies using sequential explanations(2021)26 cited
• → Identification of outliers in pollution concentration levels using anomaly detection(2016)6 cited
• → A New Neighborhood-Based Outlier Detection Technique(2019)4 cited