A Survey of Outlier Detection Methods in Network Anomaly Identification

2011/03/20 by P. Gogoi, P. K. Gogoi, Dhruba K. Bhattacharyya +5 · 247 citations
Computer Science · #Anomaly (physics) #Anomaly Detection Techniques and Applications #Anomaly detection #Artificial intelligence #Computer science #Computer security #Context (archaeology) #Data mining #Geography #Identification (biology) #Imbalanced Data Classification Techniques #Key (lock) #Machine learning #Network Security and Intrusion Detection #Outlier #Pattern recognition (psychology)

paper · doi:10.1093/comjnl/bxr026

published in The Computer Journal 54(4), 570-588 (Oxford University Press)

openalex publication_date 2011/03/20 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/25

Abstract

The detection of outliers has gained considerable interest in data mining with the realization that outliers can be the key discovery to be made from very large databases. Outliers arise due to various reasons such as mechanical faults, changes in system behavior, fraudulent behavior, human error and instrument error. Indeed, for many applications the discovery of outliers leads to more interesting and useful results than the discovery of inliers. Detection of outliers can lead to identification of system faults so that administrators can take preventive measures before they escalate. It is possible that anomaly detection may enable detection of new attacks. Outlier detection is an important anomaly detection approach. In this paper, we present a comprehensive survey of well-known distance-based, density-based and other techniques for outlier detection and compare them. We provide definitions of outliers and discuss their detection based on supervised and unsupervised learning in the context of network anomaly detection.

Citations

• Fuzzy logic, neural networks, and soft computing
• Rough sets

Cited by

• A Unifying Review of Deep and Shallow Anomaly Detection
• Combining ensemble methods and social network metrics for improving\n accuracy of OCSVM on intrusion detection in SCADA systems
• On the Runtime-Efficacy Trade-off of Anomaly Detection Techniques for Real-Time Streaming Data
• Multiple samples aCGH analysis for rare CNVs detection. [europepmc]
• Robust Indoor Human Activity Recognition Using Wireless Signals. [europepmc]
• Trend-Residual Dual Modeling for Detection of Outliers in Low-Cost GPS Trajectories. [europepmc]
• Two novel outlier detection approaches based on unsupervised possibilistic and fuzzy clustering. [europepmc]
• Comparative Analysis of Anomaly Detection Approaches in Firewall Logs: Integrating Light-Weight Synthesis of Security Logs and Artificially Generated Attack Detection. [europepmc]

Related

• WePaMaDM-Outlier Detection: Weighted Outlier Detection using Pattern Approaches for Mass Data Mining
• Rare Yet Popular: Evidence and Implications from Labeled Datasets for Network Anomaly Detection
• Network Anomaly Detection: A Survey and Comparative Analysis of Stochastic and Deterministic Methods
• Outlier Detection using AI: A Survey
• Outlier Detection by Consistent Data Selection Method