An Approach to Anomaly Detection with Dynamic Threshold Definition for Real-World Environments
摘要
This paper introduces the Memory-based Streaming Classification for Anomaly Detection (MSCAD), which combines supervised memory updates with adaptive thresholding to enhance performance in streaming data environments. Evaluations were conducted on three publicly available datasets: KDD Cup 1999 (KDD99), NSL-KDD, and UNSW-NB15. MSCAD consistently outperforms the baseline MemStream model, especially in recall and F1-score. The proposed dynamic thresholding mechanism enhances adaptability to evolving data distributions, addressing limitations of fixed-threshold approaches. Results demonstrate MSCAD’s robustness across datasets of varying complexity, establishing it as a reliable solution for real-world anomaly detection tasks.