Communication Dans Un Congrès Année : 2025

DREAM: Dual foREcAsting Model for Network Anomaly Detection

Résumé

In this paper, we address the challenge of anomaly detection in multivariate time series data related to environments requiring stringent guarantees, notably in 5G and beyond 5G systems promising high reliability and quality. Traditional approaches to anomaly detection, including supervised, unsupervised, and self-supervised methods often struggle with the diversity and unpredictability of real-world anomalies. To overcome these limitations, we propose a novel dual forecasting model approach, DREAM (Dual foREcAsting Model Anomaly Detection), which leverages both normal and unlabeled data to enhance detection accuracy. Our approach involves training two distinct models: one on normal behavior and the other on mixed behavior, and then comparing their outputs to identify anomalies. We also introduce new evaluation method, addressing the shortcomings of traditional point-wise evaluation. Our experiments, with multiple networked system datasets, demonstrate that DREAM outperforms traditional forecasting-based approaches, including when used in a hybrid manner with traditional forecasting algorithms.

Fichier principal
Vignette du fichier
DREAM Dual foREcAsting Model for Network.pdf (607.76 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-05049981 , version 1 (01-09-2025)

Licence

Identifiants

Citer

Mehdi Boudjelli, Sihem Cherrared, Pedro Braconnot Velloso, Xiaofeng Huang, Fabrice Guillemin, et al.. DREAM: Dual foREcAsting Model for Network Anomaly Detection. NOMS 2025, IEEE; IFIP, May 2025, Honolulu (Hawai), United States. ⟨10.1109/NOMS57970.2025.11073605⟩. ⟨hal-05049981⟩
237 Consultations
188 Téléchargements

Altmetric

Partager

  • More