arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1804.04780stat.MLcs.LG
收藏

一种基于网格的对抗性聚类算法

A Grid Based Adversarial Clustering Algorithm

Purdue University(普渡大学)

Wutao Wei, Nikhil Gupta, Bowei Xi

AI总结:

本文针对网络安全中标注数据稀缺且存在主动对抗的问题,提出一种基于网格和博弈论的对抗性聚类算法,用于识别正常核心区域、构建防御墙并发现攻击子簇与异常离群点。

摘要:

如今,越来越多的数据被收集用于检测和预防网络攻击。在网络安全应用中,数据分析技术必须应对试图欺骗数据分析模型并避免被检测到的主动对手。这种对抗行为的存在推动了针对各种任务的鲁棒且具有弹性的对抗学习技术的发展。以往的大部分工作集中于对抗性分类技术,这些技术假设存在相当数量且经过仔细标注的数据实例。然而,在实践中,标注数据实例通常需要昂贵且耗时的人类专业知识,并成为重要瓶颈。与此同时,大量未标注实例也可以用于理解对手的行为。为解决上述挑战,本文提出了一种新颖的基于网格的对抗性聚类算法。我们的对抗性聚类算法能够识别核心正常区域,并利用博弈论思想在正常对象中心周围构建防御墙。该算法还识别攻击对象的子簇、簇内重叠区域以及可能是潜在异常的离群点。

英文摘要:

Nowadays more and more data are gathered for detecting and preventing cyber attacks. In cyber security applications, data analytics techniques have to deal with active adversaries that try to deceive the data analytics models and avoid being detected. The existence of such adversarial behavior motivates the development of robust and resilient adversarial learning techniques for various tasks. Most of the previous work focused on adversarial classification techniques, which assumed the existence of a reasonably large amount of carefully labeled data instances. However, in practice, labeling the data instances often requires costly and time-consuming human expertise and becomes a significant bottleneck. Meanwhile, a large number of unlabeled instances can also be used to understand the adversaries' behavior. To address the above mentioned challenges, in this paper, we develop a novel grid based adversarial clustering algorithm. Our adversarial clustering algorithm is able to identify the core normal regions, and to draw defensive walls around the centers of the normal objects utilizing game theoretic ideas. Our algorithm also identifies sub-clusters of attack objects, the overlapping areas within clusters, and outliers which may be potential anomalies.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑