Network Anomaly Detection on Real-life network ARP calls 10M 362 nodes 42 weeks
58.5PrecisionLightGBM + EVT
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| LightGBM + EVTPrediction Method=LightGBM, Classifier=EVT, Hierarchy=Two-level2023.04 | 58.5 | 65.9 | 34.1 | 1 | |
| ZINB + EVTPrediction Method=ZINB, Classifier=EVT, Hierarchy=Two-level2023.04 | 31.8 | 73.5 | 24.3 | 3.341 | |
| TSLM + EVTPrediction Method=TSLM, Classifier=EVT, Hierarchy=Two-level2023.04 | 29.1 | 79 | 25.6 | 17.098 | |
| ETS + EVTPrediction Method=ETS, Classifier=EVT, Hierarchy=Two-level2023.04 | 28.6 | 76.9 | 20.8 | 7.634 | |
| AutoencoderThreshold=(1-alpha)-th percentile with alpha = 0.052023.04 | 1.8 | 89 | 3.2 | 59.049 |