PBP: A Type of BP Neural Network Algorithm Based on Priori Triggering

The algorithm of anomaly detection for large scale networks is a key way to promptly detect the abnormal traffic flows. In this paper, priori triggered BP neural network algorithm(PBP) is analyzed for the purpose of dealing with the problems caused by typical algorithms that are not able to adapt and learn; detect with high precision; provide high level of correctness. PBP uses K-Means and PCA to trigger self-adapting and learning ability, and also, it uses historical neuron parameter to initialize the neural network, so that it use the trained network to detect the abnormal traffic flows. According to experiments, PBP can obtain a higher level of correctness of detection than priori algorithm, and it can adapt itself according to different network environments.

[1]  Marina Thottan,et al.  Anomaly detection in IP networks , 2003, IEEE Trans. Signal Process..

[2]  Mark Crovella,et al.  Characterization of network-wide anomalies in traffic flows , 2004, IMC '04.

[3]  Christophe Diot,et al.  Diagnosing network-wide traffic anomalies , 2004, SIGCOMM.

[4]  Kavé Salamatian,et al.  Combining filtering and statistical methods for anomaly detection , 2005, IMC '05.

[5]  Ling Huang,et al.  Communication-Efficient Online Detection of Network-Wide Anomalies , 2007, IEEE INFOCOM 2007 - 26th IEEE International Conference on Computer Communications.

[6]  David M. Mount,et al.  The analysis of a simple k-means clustering algorithm , 2000, SCG '00.

[7]  D.M. Mount,et al.  An Efficient k-Means Clustering Algorithm: Analysis and Implementation , 2002, IEEE Trans. Pattern Anal. Mach. Intell..