Detecting anomalies and attacks in network traffic monitoring with classification methods and XAI-based explainability

Abstract

Assuring the network traffic safety is a very important issue in a variety of today’s industries. Therefore, the development of anomalies and attacks detection methods has been the goal of analyses. In the paper the binary classification-based approach to network traffic safety monitoring is presented. The well known methods were applied to artificially modified network traffic data and their detection capabilities were tested. More detailed interpretation of the nature of detected anomalies is carried out with the help of the XAI approach. For the purpose of experiments a new benchmark network traffic data set was prepared, which is now commonly available.