Skip to Main content Skip to Navigation
Conference papers

Study and Evaluation of Unsupervised Algorithms used in Network Anomaly Detection

Juliette Dromard 1 Philippe Owezarski 1
1 LAAS-SARA - Équipe Services et Architectures pour Réseaux Avancés
LAAS - Laboratoire d'analyse et d'architecture des systèmes
Abstract : Network anomalies are unusual traffic mainly induced by network attacks or network failures. Therefore it is important for network operators as end users to detect and diagnose them to protect their network. However, these anomalies keep changing in time, it is therefore important to propose detectors which can learn from the traffic and spot anomalies without relying on any previous knowledge. Unsupervised network anomaly detectors reach this goal by taking advantage of machine learning and statistical techniques to spot the anomalies. There exists many unsupervised network anomaly detectors in the literature. Each algorithm puts forward its good detection performance, therefore it is difficult to select one detector among the large set of available detectors. Therefore, this paper, presents an extensive study and assessment of a set of well known unsupervised network anomaly detectors, and underlines their strengths and weaknesses. This study overwhelms previous similar evaluation by considering for the comparison some new, original and of premier importance parameters as detection similarity, detectors sensitivity and curse of dimensionality, together with the classical detection performance, and execution time parameters.
Document type :
Conference papers
Complete list of metadata

Cited literature [29 references]  Display  Hide  Download
Contributor : Philippe Owezarski <>
Submitted on : Friday, October 25, 2019 - 8:17:40 PM
Last modification on : Thursday, June 10, 2021 - 3:06:24 AM
Long-term archiving on: : Sunday, January 26, 2020 - 5:29:59 PM


Files produced by the author(s)


  • HAL Id : hal-02334251, version 1


Juliette Dromard, Philippe Owezarski. Study and Evaluation of Unsupervised Algorithms used in Network Anomaly Detection. Future Technologies Conference (FTC 2019), Oct 2019, San Francisco, United States. ⟨hal-02334251⟩



Record views


Files downloads