Ensemble of feature chains for anomaly detection

Lena Tenenboim-Chekina, Lior Rokach, Bracha Shapira

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

9 Scopus citations

Abstract

Along with recent technological advances more and more new threats and advanced cyber-attacks appear unexpectedly. Developing methods which allow for identification and defense against such unknown threats is of great importance. In this paper we propose new ensemble method (which improves over the known cross-feature analysis, CFA, technique) allowing solving anomaly detection problem in semi-supervised settings using well established supervised learning algorithms. Theoretical correctness of the proposed method is demonstrated. Empirical evaluation results on Android malware datasets demonstrate effectiveness of the proposed approach and its superiority against the original CFA detection method.

Original languageEnglish
Title of host publicationMultiple Classifier Systems - 11th International Workshop, MCS 2013, Proceedings
Pages295-306
Number of pages12
DOIs
StatePublished - 1 Dec 2013
Event11th International Workshop on Multiple Classifier Systems, MCS 2013 - Nanjing, China
Duration: 15 May 201317 May 2013

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume7872 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference11th International Workshop on Multiple Classifier Systems, MCS 2013
Country/TerritoryChina
CityNanjing
Period15/05/1317/05/13

Keywords

  • Android
  • Anomaly detection
  • Ensemble methods
  • Machine learning
  • Malware
  • Network monitoring
  • Probabilistic methods

ASJC Scopus subject areas

  • Theoretical Computer Science
  • General Computer Science

Fingerprint

Dive into the research topics of 'Ensemble of feature chains for anomaly detection'. Together they form a unique fingerprint.

Cite this