Anomaly Detection for Scenario-based Insider Activities using CGAN Augmented Data
Insider threats are the cyber attacks from within the trusted entities of an organization. Lack of real-world data and issue of data imbalance leave insider threat analysis an understudied research area. To mitigate the effect of skewed class distribution and prove the potential of multinomial classification algorithms for insider threat detection, we propose an approach that combines generative model with supervised learning to perform multi-class classification using deep learning. The generative adversarial network (GAN) based insider detection model introduces Conditional Generative Adversarial Network (CGAN) to enrich minority class samples to provide data for multi-class anomaly detection. The comprehensive experiments performed on the benchmark dataset demonstrates the effectiveness of introducing GAN derived synthetic data and the capability of multi-class anomaly detection in insider activity analysis. Moreover, the method is compared with other existing methods against different parameters and performance metrics.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionGeneral ClassificationGenerative Adversarial NetworkMulti-class Anomaly DetectionMulti-class ClassificationSimilar Papers 제목 키워드 기반
ADSAGE: Anomaly Detection in Sequences of Attributed Graph Edges applied to insider threat detection at fine-grained level
Previous works on the CERT insider threat detection case have neglected graph and text features despite their relevance to describe user behavior. Additionally, existing systems heavily rely on feature engineering and au…
Anomaly DetectionFeature EngineeringLAN: Learning Adaptive Neighbors for Real-Time Insider Threat Detection
Enterprises and organizations are faced with potential threats from insider employees that may lead to serious consequences. Previous studies on insider threat detection (ITD) mainly focus on detecting abnormal users or …
Anomaly DetectionGraph structure learningDimensionality reduction techniques to support insider trading detection
Identification of market abuse is an extremely complicated activity that requires the analysis of large and complex datasets. We propose an unsupervised machine learning method for contextual anomaly detection, which all…
Anomaly DetectionContextual Anomaly DetectionDimensionality ReductionPositionDeep Learning for Unsupervised Insider Threat Detection in Structured Cybersecurity Data Streams
Analysis of an organization's computer network activity is a key component of early detection and mitigation of insider threat, a growing concern for many organizations. Raw system logs are a prototypical example of stre…
Anomaly DetectionHybrid Deep Learning Model using SPCAGAN Augmentation for Insider Threat Analysis
Cyberattacks from within an organization's trusted entities are known as insider threats. Anomaly detection using deep learning requires comprehensive data, but insider threat data is not readily available due to confide…
Adversarial RobustnessAnomaly DetectionGenerative Adversarial NetworkSynthetic Data Generation