Uncovering Anomalies using Isolation Forest – A Machine Learning Approach for Request Analysis

Typ
Examensarbete på grundnivå
Program
Datateknik 180 hp (högskoleingenjör)
Publicerad
2023
Författare
Hagenbo, Viktoria
Rosin, Lovisa
Modellbyggare
Tidskriftstitel
ISSN
Volymtitel
Utgivare
Sammanfattning
In an increasingly digital era, the prevalence of misconduct increases as online social networks enable the creation of bots posing as normal users. This type of misconduct can appear in various forms, for example, emails containing unwanted advertisements, attempts of malware distribution, or simply collecting user-sensitive information. To detect this behaviour, using machine learning is well-considered and researched, especially regarding the analysis of the content of messages and online posts. This project explores the approach to analyze metadata from HTTP requests to find patterns for anomalous behavior, with the end goal being a machine learning module that can be integrated into a larger system for request analysis. After reviewing different approaches suggested by previous research and theoretical reasoning, the proposed system has been designed and implemented using the Isolation Forest model. Feature engineering has been utilized to extract information from sequences of input requests. The system consists of two different model instances which operate on different sequence length intervals. The conclusion to use the selected models has been obtained when evaluating differently trained Isolation Forest instances using precision, recall, and the F1 score as metrics.
Beskrivning
Ämne/nyckelord
Machine learning , Isolation Forest , Unsupervised learning , Request analysis , Anomaly detection , Feature engineering
Citation
Arkitekt (konstruktör)
Geografisk plats
Byggnad (typ)
Byggår
Modelltyp
Skala
Teknik / material
Index