Network Anomaly Sequence Prediction Method Based on LSTM and Two-layer Window Features

Abstract

Abstract To solve the over-fitting problem in the prediction algorithm caused by the small number of features that arise during the network anomaly prediction process, an LSTM algorithm for network anomaly predictions based on two-layer time window features was proposed. Firstly, the network alarm data sequence was divided according to the observation time window and prediction time window. Secondly, considering that the time series of the anomaly alarm data can be somewhat periodic, a time window sequence dataset was created with the periodic features and statistical features in the two-layer windows. Finally, one-shot and feedback models of the LSTM algorithm were employed to predict network anomalies. The experiment showed that the best prediction accuracy for this method is over 80% with both one-shot and feedback models, when the prediction time window is 12h.