Visible to the public Autoencoder-Based Feature Learning for Cyber Security Applications

TitleAutoencoder-Based Feature Learning for Cyber Security Applications
Publication TypeConference Paper
Year of Publication2017
AuthorsYousefi-Azar, M., Varadharajan, V., Hamey, L., Tupakula, U.
Conference Name2017 International Joint Conference on Neural Networks (IJCNN)
Date Publishedmay
ISBN Number978-1-5090-6182-2
KeywordsAE, anomaly intrusion detection, Artificial neural networks, autoencoder, computer network security, computer security, cyber security, encoding, feature extraction, feature learning, feature vector, Intrusion detection, invasive software, learning (artificial intelligence), machine learning, Malware, malware classication, Metrics, pattern classification, policy-based governance, pubcrawl, resilience, Resiliency, Training, Vectors
Abstract

This paper presents a novel feature learning model for cyber security tasks. We propose to use Auto-encoders (AEs), as a generative model, to learn latent representation of different feature sets. We show how well the AE is capable of automatically learning a reasonable notion of semantic similarity among input features. Specifically, the AE accepts a feature vector, obtained from cyber security phenomena, and extracts a code vector that captures the semantic similarity between the feature vectors. This similarity is embedded in an abstract latent representation. Because the AE is trained in an unsupervised fashion, the main part of this success comes from appropriate original feature set that is used in this paper. It can also provide more discriminative features in contrast to other feature engineering approaches. Furthermore, the scheme can reduce the dimensionality of the features thereby signicantly minimising the memory requirements. We selected two different cyber security tasks: networkbased anomaly intrusion detection and Malware classication. We have analysed the proposed scheme with various classifiers using publicly available datasets for network anomaly intrusion detection and malware classifications. Several appropriate evaluation metrics show improvement compared to prior results.

URLhttp://ieeexplore.ieee.org/document/7966342/
DOI10.1109/IJCNN.2017.7966342
Citation Keyyousefi-azar_autoencoder-based_2017