An Ensemble of Activation Functions in AutoEncoder Applied to IoT Anomaly Detection

• Published in: 2019 6th NAFOSTED Conference on Information and Computer Science (NICS) pp. 534 - 539
• Main Authors: Vu, Ly, Nguyen, Quang Uy
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.12.2019
• Subjects: Activation function; Anomaly detection; AutoEncoder (AE); Botnet; Data models; Decoding; Deep learning; Ensemble; Ensemble Latent Representation (ELR); Internet of Things; IoT; Machine learning; Relu; Tanh; Training
• DOI: 10.1109/NICS48868.2019.9023860

We propose an ensemble of activation functions for learning the latent representation of AutoEncoder (AE) to improve the accuracy of Internet of Things (IoT) botnet (anomaly) detection. The proposed model is called Ensemble Latent Representation (ELR) that combines the activation functions, i.e., hyperbolic Tangent (Tanh) and Rectified Linear Unit (Relu) in hidden layers of AE. This model enhances the advantages and mitigates the shortcomings of Tanh and Relu function. As a result, the latent representation learnt by AE is more robust, thereby improving the accuracy of classification algorithms for the IoT anomaly detection. To evaluate the effectiveness of the proposed model, we carried out intensive experiments on four IoT anomaly datasets using four popular classifiers, i.e., Support Vector Machine (SVM), Perceptron (PCT), Nearest Centroid (NCT), and Linear Regression (LR). The experimental results show that our proposed model significantly improves the accuracy of IoT anomaly detection up to 19.9% compared to the original one using area under the curve metric.