Online anomaly rate parameter tracking for anomaly detection in wireless sensor networks
Published 1 June 2012
Colin O’Reilly, Alex Gluhak, Muhammad Ali Imran, Sutharshan Rajasegarar
Citations14
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This paper proposes an adaptive algorithm that can dynamically adjust the anomaly rate parameter, which can be represented by a model parameter of a one-class quarter-sphere support vector machine, and operates in an online, iterative manner producing an optimal model for a training set, which is presented sequentially.
Abstract
Anomaly detection in a Wireless Sensor Network is an important aspect of data analysis in order to facilitate intrusion and event detection. A key challenge is creating optimal classifiers constructed from training sets in which the anomaly rates are varying due to the existence of non-stationary distributions in the data. In this paper we propose an adaptive algorithm that can dynamically adjust the anomaly rate parameter, which can be represented by a model parameter of a one-class quarter-sphere support vector machine. This algorithm operates in an online, iterative manner producing an optimal model for a training set, which is presented sequentially. Our evaluations demonstrate that our algorithm is capable of constructing optimal models for a training set that minimizes the error rate on the classification set compared to a static model, where the anomaly rate is kept stationary.
Keywords
Computer Science
The Nature of Statistical Learning Theory
39,279 Citations1995Vladimir Vapnik
ACM Computing SurveysAnomaly detection
11,146 Citations2009Varun Chandola, Arindam Banerjee +1 more
This survey tries to provide a structured and comprehensive overview of the research on anomaly detection by grouping existing techniques into different categories based on the underlying approach adopted by each technique.
Neural ComputationNonlinear Component Analysis as a Kernel Eigenvalue Problem
8,078 Citations1998Bernhard Schölkopf, Alexander J. Smola +1 more
A new method for performing a nonlinear form of principal component analysis by the use of integral operator kernel functions is proposed and experimental results on polynomial feature extraction for pattern recognition are presented.
Neural ComputationEstimating the Support of a High-Dimensional Distribution
5,946 Citations2001Bernhard Schölkopf, John Platt +3 more
The algorithm is a natural extension of the support vector algorithm to the case of unlabeled data by carrying out sequential optimization over pairs of input patterns and providing a theoretical analysis of the statistical performance of the algorithm.
Machine LearningSupport Vector Data Description
3,484 Citations2003David M. J. Tax, Robert P. W. Duin
The Support Vector Data Description (SVDD) is presented which obtains a spherically shaped boundary around a dataset and analogous to the Support Vector Classifier it can be made flexible by using other kernel functions.
Machine LearningLearning in the Presence of Concept Drift and Hidden Contexts
1,432 Citations1996Gerhard Widmer, Miroslav Kubát
A family of learning algorithms that flexibly react to concept drift and can take advantage of situations where contexts reappear are described, including a heuristic that constantly monitors the system's behavior.
Machine LearningLearning in the presence of concept drift and hidden contexts
988 Citations1996Gerhard Widmer, Miroslav Kubát
A family of learning algorithms that flexibly react to concept drift and can take advantage of situations where contexts reappear are described, including a heuristic that constantly monitors the system's behavior.
IEEE Transactions on Neural NetworksIncremental Learning of Concept Drift in Nonstationary Environments
898 Citations2011Ryan Elwell, Robi Polikar
An ensemble of classifiers-based approach for incremental learning of concept drift, characterized by nonstationary environments (NSEs), where the underlying data distributions change over time, which indicates that Learn++.NSE can track the changing environments very closely, regardless of the type of concept Drift.
IEEE Transactions on Pattern Analysis and Machine IntelligenceConstructing boosting algorithms from SVMs: an application to one-class classification
244 Citations2002Gunnar Rätsch, Mika Sirén +2 more
This work shows via an equivalence of mathematical programs that a support vector algorithm can be translated into an equivalent boosting-like algorithm and vice versa, and exemplifies this translation procedure for a new algorithm: one-class leveraging, starting from the one- class support vector machine (1-SVM).
Quarter Sphere Based Distributed Anomaly Detection in Wireless Sensor Networks
176 Citations2007Sutharshan Rajasegarar, Christopher Leckie +2 more
This work uses sensor data from the Great Duck Island Project to demonstrate that a distributed approach to anomaly detection is energy efficient in terms of communication overhead while achieving comparable accuracy to a centralised scheme.
IEEE Transactions on Information Forensics and SecurityCentered Hyperspherical and Hyperellipsoidal One-Class Support Vector Machines for Anomaly Detection in Sensor Networks
156 Citations2010Sutharshan Rajasegarar, Christopher Leckie +2 more
This paper proposes a distributed anomaly detection algorithm for sensor networks using a one-class quarter-sphere support vector machine (QSSVM), and evaluation of the distributed algorithm using QSSVM reveals that it detects anomalies with comparable accuracy and less communication overhead than a centralized approach.
PIK - Praxis der Informationsverarbeitung und KommunikationIntrusion Detection in Unlabeled Data with Quarter-sphere Support Vector Machines
73 Citations2004Pavel Laskov, Christin Schäfer +2 more
This contribution investigates the application of a modern machine learning technique – one-class Support Vector Machines (SVM) – for anomaly detection in unlabeled data and proposes a novel formulation of this technique which is particularly suited for the data typical for intrusion detection systems.
Technische Universität Dortmund Eldorado (Technische Universität Dortmund)Intrusion detection in unlabeled data with quarter-sphere Support Vector Machines
64 Citations2004Pavel Laskov, Christin Schäfer +1 more
International Journal of Sensor NetworksEnsuring high sensor data quality through use of online outlier detection techniques
40 Citations2010Yang Zhang, Nirvana Meratnia +1 more
This paper proposes outlier detection techniques based on one-class quarter-sphere support vector machine meeting constraints and requirements of WSNs, and takes advantage of spatial and temporal correlations that exist between sensor data to reduce the false alarm rate while increasing the detection rate.
Outliers and data descriptions
28 Citations2001David M. J. Tax, Robert P. W. Duin
This paper shows under what circumstances the heuristic error correlates well with the true error, and how both free parameters in the SVDD can be determined without the use of example outlier objects.