Oversampling based on WGAN for Network Threat Detection

Class imbalance is a common problem on network threat detection. The data of network threat usually are few and viewed as the minority class. Wasserstein GAN (WGAN) as a generative method can solve the imbalanced problem through oversampling. In this work, we use the shallow learning and the deep learning methods to build a network threat detection model on the imbalanced data. First, the imbalanced data are divided into the training data set and testing data set. Second, WGAN is used to generate the new minority samples for the training data. Then the generated data are fused to the original training data to form a balanced training data set. Third, the balanced training data set is input to the shallow learning methods to train the network threat detection model. Next, the imbalanced testing data set is input to the trained model to distinguish the network threat. The experimental results show that our network threat detection model based on WGAN for oversampling achieves a good performance for network threat detection.