Anomaly detection in network traffic using machine learning

A primary thematic of this study is centered on detecting anomalies and measuring the device health for Central Processing Unit (CPU), memory utilization, and allocation; for Key Performance Indicator (KPI) dataset which assembled throw twenty-one-day, by improving models using machine learning (ML) methods; namely, Convolutional Neural Network (CNN), and Long Short-Term Memory (LSTM), with Auto Encoders (AE), One-Class Support Vector Machine (Oc-SVM), also k-Nearest Neighbors (k-NN). The accuracy of all methods was measured by using a confusion matrix. According to the observed results, the deep learning methods yield great performance results compared to classification methods for all models. In general, CNN/AE and LSTM/AE models show higher accuracy than the other methods. The ranking of models from best to worst based on accuracy in the confusion matrix are; CNN/AE, LSTM/AE, as for the deep learning models, while for classification models the favorable order for the methods are; k-NN, and Oc-SVM.