Statistical evaluation of artificial intelligence -based intrusion detection system
Puuska, Samir; Kokkonen, Tero; Mutka, Petri; Alatalo, Janne; Heilimo, Eppu; Mäkelä, Antti (2020)
Puuska, Samir
Kokkonen, Tero
Mutka, Petri
Alatalo, Janne
Heilimo, Eppu
Mäkelä, Antti
Editoija
Rocha, Alvaro
Adeli, Hojjat
Reis, Luís Paulo
Costanzo, Sandra
Orovic, Irena
Moreira, Fernando
Springer
2020
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi-fe2020082161352
https://urn.fi/URN:NBN:fi-fe2020082161352
Tiivistelmä
Training neural networks with captured real-world network data may fail to ascertain whether or not the network architecture is capable of learning the types of correlations expected to be present in real data.
In this paper we outline a statistical model aimed at assessing the learning capability of neural network-based intrusion detection system. We explore the possibility of using data from statistical simulations to ascertain that the network is capable of learning so called precursor patterns. These patterns seek to assess if the network can learn likely statistical properties, and detect when a given input does not have those properties and is anomalous.
We train a neural network using synthetic data and create several test datasets where the key statistical properties are altered. Based on our findings, the network is capable of detecting the anomalous data with high probability.
In this paper we outline a statistical model aimed at assessing the learning capability of neural network-based intrusion detection system. We explore the possibility of using data from statistical simulations to ascertain that the network is capable of learning so called precursor patterns. These patterns seek to assess if the network can learn likely statistical properties, and detect when a given input does not have those properties and is anomalous.
We train a neural network using synthetic data and create several test datasets where the key statistical properties are altered. Based on our findings, the network is capable of detecting the anomalous data with high probability.