面向网络异常检测的分布式在线一类支持向量机

Distributed Online One-Class Support Vector Machine for Anomaly Detection Over Networks

IEEE Transactions on Cybernetics · 2018
被引 187
ABS 3

中文导读

提出了一种分布式在线一类支持向量机方法,用于无线传感器网络中的异常检测,通过随机近似核函数和稀疏约束实现低误检率、高真阳性率,且运行时间短、内存消耗低。

Abstract

Anomaly detection has attracted much attention in recent years since it plays a crucial role in many domains. Various anomaly detection approaches have been proposed, among which one-class support vector machine (OCSVM) is a popular one. In practice, data used for anomaly detection can be distributively collected via wireless sensor networks. Besides, as the data usually arrive at the nodes sequentially, online detection method that can process streaming data is preferred. In this paper, we formulate a distributed online OCSVM for anomaly detection over networks and get a decentralized cost function. To get the decentralized implementation without transmitting the original data, we use a random approximate function to replace the kernel function. Furthermore, to find an appropriate approximate dimension, we add a sparse constraint into the decentralized cost function to get another one. Then we minimize these two cost functions by stochastic gradient descent and derive two distributed algorithms. Some theoretical analysis and experiments are performed to show the effectiveness of the proposed algorithms. Experimental results on both synthetic and real datasets reveal that both of the proposed algorithms achieve low misdetection rates and high true positive rates. Compared with other state-of-the-art anomaly detection methods, the proposed distributed algorithms not only show good anomaly detection performance, but also require relatively short running time and low CPU memory consumption.

异常检测分布式算法在线学习支持向量机无线传感器网络