Interpretable Feature Learning in Multivariate Big Data Analysis for Network Monitoring

Abstract

There is an increasing interest in the development of new data-driven models useful to assess the performance of communication networks. For many applications, like network monitoring and troubleshooting, a data model is of little use if it cannot be interpreted by a human operator. In this paper, we present an extension of the Multivariate Big Data Analysis (MBDA) methodology, a recently proposed interpretable data analysis tool. In this extension, we propose a solution to the automatic derivation of features, a cornerstone step for the application of MBDA when the amount of data is massive. The resulting network monitoring approach allows us to detect and diagnose disparate network anomalies, with a data-analysis workflow that combines the advantages of interpretable and interactive models with the power of parallel processing. We apply the extended MBDA to two case studies: UGR'16, a benchmark flow-based real-traffic dataset for anomaly detection, and Dartmouth'18, the longest and largest Wi-Fi trace known to date.

References in corpus (9)

• Efficient Estimation of Word Representations in Vector Space
• Towards A Rigorous Science of Interpretable Machine Learning
• Deep Learning for Anomaly Detection: A Review
• A Survey on Big Data for Network Traffic Monitoring and Analysis
• Multivariate Big Data Analysis for Intrusion Detection: 5 steps from the haystack to the needle
• Self-explaining AI as an alternative to interpretable AI
• Explaining Black-box Models for Biomedical Text Classification
• Investigating Extensions to Random Walk Based Graph Embedding
• Quality In / Quality Out: Data quality more relevant than model choice in anomaly detection with the UGR'16