Implementation of Augmented Network Log Anomaly Detection Procedures

Implements procedures developed by Gutierrez et al. (2017, < https://journal.r-project.org/archive/2017/RJ-2017-039/index.html>) to aid in detecting network log anomalies. By combining various multivariate analytic approaches relevant to network anomaly detection, it provides cyber analysts efficient means to detect suspected anomalies requiring further evaluation.


anomalyDetection

Authors: Andy McCarthy & Brandon Greenwell
License: GPL-3.0

CRAN_Status_Badge Travis-CI Build Status AppVeyor Build Status codecov

anomalyDetection implements procedures to aid in detecting network log anomalies. By combining various multivariate analytic approaches relevant to network anomaly detection, it provides cyber analysts efficient means to detect suspected anomalies requiring further evaluation.

Installation

You can install anomalyDetection two ways.

  • Using the latest released version from CRAN:
install.packages("anomalyDetection")
  • Using the latest development version from GitHub:
if (packageVersion("devtools") < 1.6) {
  install.packages("devtools")
}

devtools::install_github("AFIT-R/anomalyDetection", build_vignettes = TRUE)

Learning

To get started with anomalyDetection, read the intro vignette: vignette("Introduction", package = "anomalyDetection"). This will provide a thorough introduction to the functions provided in the package.

News

NEWS for anomalyDetection package

Changes for version 0.2.2

  • Added NEWS file.
  • Better tolerance in mahalanobis_distance when inverting covariance matrices.
  • mahalanobis_distance and horns_curve have been rewritten in C++ using the RcppArmadillo package. This greatly improved the speed (and accuracy) of these functions.
  • tabulate_state_vector has been rewritten using the dplyr package, greatly improving the speed of this function. Greater traceability is now also present for missing values and numeric variables.
  • Producing histogram matrix to visually display anomalous blocks made easier with addition of hmat function
  • Properly registered native routines and disabled symbol search.

Reference manual

It appears you don't have a PDF plugin for this browser. You can click here to download the reference manual.

install.packages("anomalyDetection")

0.2.5 by Bradley Boehmke, 4 months ago


https://github.com/koalaverse/anomalyDetection


Report a bug at https://github.com/koalaverse/anomalyDetection/issues


Browse source code at https://github.com/cran/anomalyDetection


Authors: Bradley Boehmke [aut, cre], Brandon Greenwell [aut], Jason Freels [aut], Robert Gutierrez [aut]


Documentation:   PDF Manual  


GPL (>= 2) license


Imports caret, dplyr, ggplot2, gmp, magrittr, MASS, plyr, purrr, Rcpp, stats, tibble, tidyr

Suggests gplots, knitr, RColorBrewer, rmarkdown, testthat

Linking to Rcpp, RcppArmadillo


See at CRAN