Hunting attacks in the dark: clustering and correlation analysis for unsupervised anomaly detection

J Mazel, P Casas, R Fontugne… - … Journal of Network …, 2015 - Wiley Online Library
Network anomalies and attacks represent a serious challenge to ISPs, who need to cope
with an increasing number of unknown events that put their networks' integrity at risk. Most of …

Sub-space clustering and evidence accumulation for unsupervised network anomaly detection

J Mazel, P Casas, P Owezarski - … , TMA 2011, Vienna, Austria, April 27 …, 2011 - Springer
Network anomaly detection has been a hot research topic for many years. Most detection
systems proposed so far employ a supervised strategy to accomplish the task, using either …

Sub-space clustering, inter-clustering results association & anomaly correlation for unsupervised network anomaly detection

J Mazel, P Casas, Y Labit… - 2011 7th international …, 2011 - ieeexplore.ieee.org
Network anomaly detection is a critical aspect of network management for instance for QoS,
security, etc. The continuous arising of new anomalies and attacks create a continuous …

Unsupervised network anomaly detection

J Mazel - 2011 - theses.hal.science
Anomaly detection has become a vital component of any network in today's Internet.
Ranging from non-malicious unexpected events such as flash-crowds and failures, to …

Unada: Unsupervised network anomaly detection using sub-space outliers ranking

P Casas, J Mazel, P Owezarski - … 2011: 10th International IFIP TC 6 …, 2011 - Springer
Current network monitoring systems rely strongly on signa-ture-based and supervised-
learning-based detection methods to hunt out network attacks and anomalies. Despite being …

Unsupervised network anomaly detection based on abnormality weights and subspace clustering

X Zhao, G Wang, Z Li - 2016 Sixth International Conference on …, 2016 - ieeexplore.ieee.org
Most traditional network anomalies and attacks detection systems tend to employ supervised
strategies, which require labeled training dataset that is arduous and expensive to obtain …

MSCA: An unsupervised anomaly detection system for network security in backbone network

Y Liu, Y Gu, X Shen, Q Liao, Q Yu - IEEE Transactions on …, 2022 - ieeexplore.ieee.org
Anomaly detection is a crucial topic in network security which refers to automatically mining
known and unknown attacks or threats. Many detectors have been proposed in the last …

[PDF][PDF] Black box anomaly detection: is it utopian?

S Venkataraman, J Caballero, D Song… - Irvine Is …, 2006 - nyunetworks.github.io
Automatic identification of anomalies on network data is a problem of fundamental interest to
ISPs to diagnose incipient problems in their networks. ISPs gather diverse data sources from …

A-GHSOM: An adaptive growing hierarchical self organizing map for network anomaly detection

D Ippoliti, X Zhou - Journal of Parallel and Distributed Computing, 2012 - Elsevier
The growing hierarchical self organizing map (GHSOM) has been shown to be an effective
technique to facilitate anomaly detection. However, existing approaches based on GHSOM …

Steps towards autonomous network security: unsupervised detection of network attacks

P Casas, J Mazel, P Owezarski - 2011 4th IFIP International …, 2011 - ieeexplore.ieee.org
The unsupervised detection of network attacks represents an extremely challenging goal.
Current methods rely on either very specialized signatures of previously seen attacks, or on …