GEE: A Gradient-based Explainable Variational Autoencoder for Network Anomaly Detection
Not on the map. Why?
Abstract (arXiv)
This paper looks into the problem of detecting network anomalies by analyzing NetFlow records. While many previous works have used statistical models and machine learning techniques in a supervised way, such solutions have the limitations that they require large amount of labeled data for training and are unlikely to detect zero-day attacks. Existing anomaly detection solutions also do not provide an easy way to explain or identify attacks in the anomalous traffic. To address these limitations, we develop and present GEE, a framework for detecting and explaining anomalies in network traffic. GEE comprises of two components: (i) Variational Autoencoder (VAE) - an unsupervised deep-learning technique for detecting anomalies, and (ii) a gradient-based fingerprinting technique for explaining anomalies. Evaluation of GEE on the recent UGR dataset demonstrates that our approach is effective in detecting different anomalies as well as identifying fingerprints that are good representations of these various attacks.
Key facts. Cited by 36 papers in the map (data through 14 Oct 2026). First posted on arXiv 15 Mar 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 13; 2023: 7; 2024: 5; 2025: 2; 2026: 2.
36 papers.
Sort:
By area:
- 2022A Survey on Explainable Anomaly Detectioncited by 39
- 2021One-Class Classification: A Surveycited by 35
- 2022Markov Chain Monte Carlo-Based Machine Unlearning: Unlearning What Needs to be Forgottencited by 25
- 2022Explainable Intrusion Detection Systems (X-IDS): A Survey of Current Methods, Challenges, and Opportunitiescited by 25
- 2021Utilizing XAI technique to improve autoencoder based model for computer network anomaly detection with shapley additive explanation(SHAP)cited by 15
- 2021Explainable Machine Learning for Fraud Detectioncited by 9
- 2022A Survey on XAI for 5G and Beyond Security: Technical Aspects, Challenges and Research Directionscited by 9
- 2022Machine Learning in NextG Networks via Generative Adversarial Networkscited by 8
- 2022Trustworthy Anomaly Detection: A Surveycited by 5
- 2022Framing Algorithmic Recourse for Anomaly Detectioncited by 5
- 2023Robust online active learningcited by 5
- 2021A new interpretable unsupervised anomaly detection method based on residual explanationcited by 4
24 more
- 2022Explaining Anomalies using Denoising Autoencoders for Financial Tabular Datacited by 4
- 2022Fine-grained Anomaly Detection in Sequential Data via Counterfactual Explanationscited by 2
- 2023MixedTeacher : Knowledge Distillation for fast inference textural anomaly detectioncited by 2
- 2023Targeted collapse regularized autoencoder for anomaly detection: black hole at the centercited by 2
- 2021Robustness of ML-Enhanced IDS to Stealthy Adversariescited by 1
- 2022VAE-iForest: Auto-encoding Reconstruction and Isolation-based Anomalies Detecting Fallen Objects on Road Surfacecited by 1
- 2022ENCODE: Encoding NetFlows for Network Anomaly Detectioncited by 1
- 2023FABLE : Fabric Anomaly Detection Automation Processcited by 1
- 2024Transfer learning applications for anomaly detection in wind turbinescited by 1
- 2024Improved Anomaly Detection through Conditional Latent Space VAE Ensemblescited by 1
- 2025UniNet: A Unified Multi-granular Traffic Modeling Framework for Network Securitycited by 1
- 2025A systematic literature review of unsupervised learning algorithms for anomalous traffic detection based on flowscited by 1
- 2021Improving Botnet Detection with Recurrent Neural Network and Transfer Learningcited by 0
- 2021Coalitional Bayesian Autoencoders -- Towards explainable unsupervised deep learningcited by 0
- 2022Statistics and Deep Learning-based Hybrid Model for Interpretable Anomaly Detectioncited by 0
- 2022Explanation Method for Anomaly Detection on Mixed Numerical and Categorical Spacescited by 0
- 2023Adaptable and Interpretable Framework for Novelty Detection in Real-Time IoT Systemscited by 0
- 2023Detection of Sensor-To-Sensor Variations using Explainable AIcited by 0
- 2023Assessing the Impact of a Supervised Classification Filter on Flow-based Hybrid Network Anomaly Detectioncited by 0
- 2024CSE: Surface Anomaly Detection with Contrastively Selected Embeddingcited by 0
- 2024Spectral Image Data Fusion for Multisource Data Augmentationcited by 0
- 2024State Frequency Estimation for Anomaly Detectioncited by 0
- 2026PLAA: Packet-level Adversarial Attacks in Network Traffic Detectioncited by 0
- 2026Generative AI and Federated Learning for Intrusion Detection Systems: A Surveycited by 0
- 2026Generative AI and Federated Learning for Intrusion Detection Systems: A Survey1 Jul 2026
- 2026PLAA: Packet-level Adversarial Attacks in Network Traffic Detection26 Jun 2026
- 2025A systematic literature review of unsupervised learning algorithms for anomalous traffic detection based on flows11 Mar 2025
- 2025UniNet: A Unified Multi-granular Traffic Modeling Framework for Network Security6 Mar 2025
- 2024State Frequency Estimation for Anomaly Detection4 Dec 2024
- 2024Improved Anomaly Detection through Conditional Latent Space VAE Ensembles16 Oct 2024
- 2024Spectral Image Data Fusion for Multisource Data Augmentation5 Apr 2024
- 2024Transfer learning applications for anomaly detection in wind turbines3 Apr 2024
- 2024CSE: Surface Anomaly Detection with Contrastively Selected Embedding4 Mar 2024
- 2023Assessing the Impact of a Supervised Classification Filter on Flow-based Hybrid Network Anomaly Detection10 Oct 2023
- 2023Targeted collapse regularized autoencoder for anomaly detection: black hole at the center22 Jun 2023
- 2023Detection of Sensor-To-Sensor Variations using Explainable AI19 Jun 2023
24 more
- 2023FABLE : Fabric Anomaly Detection Automation Process16 Jun 2023
- 2023MixedTeacher : Knowledge Distillation for fast inference textural anomaly detection16 Jun 2023
- 2023Adaptable and Interpretable Framework for Novelty Detection in Real-Time IoT Systems6 Apr 2023
- 2023Robust online active learning1 Feb 2023
- 2022A Survey on Explainable Anomaly Detection13 Oct 2022
- 2022Fine-grained Anomaly Detection in Sequential Data via Counterfactual Explanations9 Oct 2022
- 2022Explaining Anomalies using Denoising Autoencoders for Financial Tabular Data21 Sep 2022
- 2022Explanation Method for Anomaly Detection on Mixed Numerical and Categorical Spaces9 Sep 2022
- 2022Explainable Intrusion Detection Systems (X-IDS): A Survey of Current Methods, Challenges, and Opportunities13 Jul 2022
- 2022ENCODE: Encoding NetFlows for Network Anomaly Detection8 Jul 2022
- 2022Framing Algorithmic Recourse for Anomaly Detection29 Jun 2022
- 2022A Survey on XAI for 5G and Beyond Security: Technical Aspects, Challenges and Research Directions27 Apr 2022
- 2022Machine Learning in NextG Networks via Generative Adversarial Networks9 Mar 2022
- 2022VAE-iForest: Auto-encoding Reconstruction and Isolation-based Anomalies Detecting Fallen Objects on Road Surface2 Mar 2022
- 2022Markov Chain Monte Carlo-Based Machine Unlearning: Unlearning What Needs to be Forgotten28 Feb 2022
- 2022Statistics and Deep Learning-based Hybrid Model for Interpretable Anomaly Detection25 Feb 2022
- 2022Trustworthy Anomaly Detection: A Survey15 Feb 2022
- 2021Utilizing XAI technique to improve autoencoder based model for computer network anomaly detection with shapley additive explanation(SHAP)14 Dec 2021
- 2021Coalitional Bayesian Autoencoders -- Towards explainable unsupervised deep learning19 Oct 2021
- 2021Explainable Machine Learning for Fraud Detection13 May 2021
- 2021Improving Botnet Detection with Recurrent Neural Network and Transfer Learning26 Apr 2021
- 2021Robustness of ML-Enhanced IDS to Stealthy Adversaries21 Apr 2021
- 2021A new interpretable unsupervised anomaly detection method based on residual explanation14 Mar 2021
- 2021One-Class Classification: A Survey8 Jan 2021
- 2022A Survey on Explainable Anomaly Detectioncited by 39
- 2021One-Class Classification: A Surveycited by 35
- 2022Explainable Intrusion Detection Systems (X-IDS): A Survey of Current Methods, Challenges, and Opportunitiescited by 25
- 2021Utilizing XAI technique to improve autoencoder based model for computer network anomaly detection with shapley additive explanation(SHAP)cited by 15
- 2021Explainable Machine Learning for Fraud Detectioncited by 9
- 2022A Survey on XAI for 5G and Beyond Security: Technical Aspects, Challenges and Research Directionscited by 9
- 2022Machine Learning in NextG Networks via Generative Adversarial Networkscited by 8
- 2022Trustworthy Anomaly Detection: A Surveycited by 5
- 2022Framing Algorithmic Recourse for Anomaly Detectioncited by 5
- 2023Robust online active learningcited by 5
- 2021A new interpretable unsupervised anomaly detection method based on residual explanationcited by 4
- 2022Explaining Anomalies using Denoising Autoencoders for Financial Tabular Datacited by 4
12 most cited of 34 All 34 (JSON)
- 2026Generative AI and Federated Learning for Intrusion Detection Systems: A Survey1 Jul 2026
- 2026PLAA: Packet-level Adversarial Attacks in Network Traffic Detection26 Jun 2026
- 2025A systematic literature review of unsupervised learning algorithms for anomalous traffic detection based on flows11 Mar 2025
- 2025UniNet: A Unified Multi-granular Traffic Modeling Framework for Network Security6 Mar 2025
- 2024State Frequency Estimation for Anomaly Detection4 Dec 2024
- 2024Improved Anomaly Detection through Conditional Latent Space VAE Ensembles16 Oct 2024
- 2024Spectral Image Data Fusion for Multisource Data Augmentation5 Apr 2024
- 2024Transfer learning applications for anomaly detection in wind turbines3 Apr 2024
- 2024CSE: Surface Anomaly Detection with Contrastively Selected Embedding4 Mar 2024
- 2023Assessing the Impact of a Supervised Classification Filter on Flow-based Hybrid Network Anomaly Detection10 Oct 2023
- 2023Targeted collapse regularized autoencoder for anomaly detection: black hole at the center22 Jun 2023
- 2023Detection of Sensor-To-Sensor Variations using Explainable AI19 Jun 2023
12 newest of 34 All 34 (JSON)