GAT-AD: Graph Attention Networks for contextual anomaly detection in network monitoring
Year: 2024
Type: article
Abstract: Network anomaly detection is essential to promptly detect and fix issues in the network. Particularly, detecting traffic anomalies enables the early detection of configuration errors, malicious activities , or equipment malfunctions that could lead to severe impact on the network. In this paper, we present GAT-AD , a Deep Learning-based anomaly detection solution for network monitoring systems , which integrates a custom neural network model based on Graph Attention Networks (GAT). Our solution monitors aggregated traffic on origin–destination flows and automatically defines contexts that group flows with similar past activity. The neural network model within GAT-AD can be efficiently trained in a self-supervised manner. We evaluate our solution against two state-of-the-art anomaly detection baselines also based on graph representations and Deep Learning , in two different datasets: ( i ) WaDi , which is a well-known dataset for anomaly detection in a distributed sensor network , and ( i i ) Abilene , where we inject synthetically-generated anomalies into a dataset with real-world traffic from a large-scale backbone network . The results show that GAT-AD outperforms the two anomaly detection baselines: in WaDi by 14.1% in recall and 10.07% in F1-score, and in the Abilene dataset by ≈ 17.5% recall with respect to the best baseline.
Language: English
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: hybrid
Estimated APC paid: $3,440
Funders: Ministerio de Ciencia, Innovación y Universidades, European Commission, Secretaría de Estado de Investigacion, Desarrollo e Innovacion, Institució Catalana de Recerca i Estudis Avançats, Ministerio de Asuntos Económicos y Transformación Digital, Gobierno de España, HORIZON EUROPE Framework Programme, Agencia Estatal de Investigación, CHIST-ERA
Awards: G1175115578, G148081399, G210041235, G2262748287, G2601397997, G2847770717, G300979063, G340395957, G34346518, G3480869486, G3681454997, G398949853, G4042783231, G425668148, G4266502337, G4526231891, G4578167273, G4865226722, G5080475149, G5195188938, G5806516646, G6094595521, G6879670291, G7084143925, G7466406081, Optimized resource integration and global architecture for mobile infrastructure for 6G, G8118709007, G938317089
OpenAlex ID: W4405738372