Point Cloud Analysis for ML-Based Malicious Traffic Detection: Reducing Majorities of False Positive Alarms
Chuanpu Fu, Qi Li, Ke Xu, Jianping Wu
Abstract
As an emerging security paradigm, machine learning (ML) based malicious traffic detection is an essential part of automatic defense against network attacks. Powered by dedicated traffic features, the ML based methods can detect various sophisticated attacks, in particular capturing zero-day attacks, which cannot be achieved by the traditional non-ML methods. However, false positive alarms raised by these advanced ML methods become the major obstacle to real-world deployment. These methods require experts to manually analyze false positives, which incurs significant labor costs. Thus, it is vital that we can reduce such false positives without heavyweight manual investigations.
Topics & Concepts
False positive paradoxComputer scienceSoftware deploymentCloud computingComputer securityFalse positive rateObstaclePoint (geometry)False positives and false negativesTrue positive rateArtificial intelligenceData miningOperating systemLawPolitical scienceGeometryMathematicsNetwork Security and Intrusion DetectionAnomaly Detection Techniques and ApplicationsSoftware System Performance and Reliability