Entropy-Defined Direct Batch Growing Hierarchical Self-Organizing Mapping for Efficient Network Anomaly Detection

Abstract

This paper proposes a network anomaly detection model of direct batch growing hierarchical self-organizing mapping based on entropy, which facilitates clear topology representation for the asymmetrically-distributed data. Since the entropy-defined parameters dynamically vary with the incident dataset, that is, follow a data-adaptive manner, the proposed model is naturally valid in all cases with various data types. For fine-grained data distinguishing, a resemble entropy parameter is proposed for the first time to our best knowledge. The experimental results validate that the proposed model achieves a more efficient network anomaly detection than the conventional models, especially for real-world applications with unexpected anomaly data updating.