Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach

Among the smart capabilities promised by the next generation cellular networks (5G and beyond), it is fundamental that potential network anomalies are detected and timely treated to avoid critical issues concerning network performance, security, public safety. In this paper, we propose a comprehensi...

Full description

Bibliographic Details
Main Authors: Hoang Duy Trinh, Engin Zeydan, Lorenza Giupponi, Paolo Dini
Format: Article
Language:English
Published: IEEE 2019-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/8871152/
_version_ 1818910242087370752
author Hoang Duy Trinh
Engin Zeydan
Lorenza Giupponi
Paolo Dini
author_facet Hoang Duy Trinh
Engin Zeydan
Lorenza Giupponi
Paolo Dini
author_sort Hoang Duy Trinh
collection DOAJ
description Among the smart capabilities promised by the next generation cellular networks (5G and beyond), it is fundamental that potential network anomalies are detected and timely treated to avoid critical issues concerning network performance, security, public safety. In this paper, we propose a comprehensive framework for detecting network anomalies using mobile traffic data: collecting data from the LTE Physical Downlink Control Channel (PDCCH) of different eNodeBs, we implement deep learning algorithms in a semi-supervised way to detect potential traffic anomalies that are generated, for example, by unexpected crowd gathering. With respect to other types of mobile dataset, using LTE PDCCH information, we are able to obtain fine-grained and high-resolution data for the users that are connected to the LTE eNodeB. Through a semi-supervised approach, algorithms are trained to detect anomalies using only one class of traffic samples. We design two algorithms based on stacked-LSTM Neural Networks: 1) LSTM Autoencoder (LSTM-AE), in which the objective is to reconstruct the traffic samples 2) LSTM traffic predictor (LSTM-PRED), where the goal is to predict the traffic in the next time-instants, based on historical data. In both cases, we analyze the reconstruction (or prediction) error to assess if the mobile traffic presents anomalies or not. Using the F1-score as metric, we demonstrate that the proposed methods are able to identify the anomalous traffic periods, beating a benchmark that comprises different state-of-the-art algorithms for anomaly detection.
first_indexed 2024-12-19T22:39:41Z
format Article
id doaj.art-2332fa181de84a209e8fa0af11cb3a7c
institution Directory Open Access Journal
issn 2169-3536
language English
last_indexed 2024-12-19T22:39:41Z
publishDate 2019-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj.art-2332fa181de84a209e8fa0af11cb3a7c2022-12-21T20:03:07ZengIEEEIEEE Access2169-35362019-01-01715218715220110.1109/ACCESS.2019.29477428871152Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised ApproachHoang Duy Trinh0https://orcid.org/0000-0001-5511-6957Engin Zeydan1Lorenza Giupponi2Paolo Dini3Centre Tecnologic Telecomunicacions Catalunya (CTTC)/CERCA, Barcelona, SpainCentre Tecnologic Telecomunicacions Catalunya (CTTC)/CERCA, Barcelona, SpainCentre Tecnologic Telecomunicacions Catalunya (CTTC)/CERCA, Barcelona, SpainCentre Tecnologic Telecomunicacions Catalunya (CTTC)/CERCA, Barcelona, SpainAmong the smart capabilities promised by the next generation cellular networks (5G and beyond), it is fundamental that potential network anomalies are detected and timely treated to avoid critical issues concerning network performance, security, public safety. In this paper, we propose a comprehensive framework for detecting network anomalies using mobile traffic data: collecting data from the LTE Physical Downlink Control Channel (PDCCH) of different eNodeBs, we implement deep learning algorithms in a semi-supervised way to detect potential traffic anomalies that are generated, for example, by unexpected crowd gathering. With respect to other types of mobile dataset, using LTE PDCCH information, we are able to obtain fine-grained and high-resolution data for the users that are connected to the LTE eNodeB. Through a semi-supervised approach, algorithms are trained to detect anomalies using only one class of traffic samples. We design two algorithms based on stacked-LSTM Neural Networks: 1) LSTM Autoencoder (LSTM-AE), in which the objective is to reconstruct the traffic samples 2) LSTM traffic predictor (LSTM-PRED), where the goal is to predict the traffic in the next time-instants, based on historical data. In both cases, we analyze the reconstruction (or prediction) error to assess if the mobile traffic presents anomalies or not. Using the F1-score as metric, we demonstrate that the proposed methods are able to identify the anomalous traffic periods, beating a benchmark that comprises different state-of-the-art algorithms for anomaly detection.https://ieeexplore.ieee.org/document/8871152/Anomaly detectionLTE5GPDCCHmobile networkstraffic prediction
spellingShingle Hoang Duy Trinh
Engin Zeydan
Lorenza Giupponi
Paolo Dini
Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach
IEEE Access
Anomaly detection
LTE
5G
PDCCH
mobile networks
traffic prediction
title Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach
title_full Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach
title_fullStr Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach
title_full_unstemmed Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach
title_short Detecting Mobile Traffic Anomalies Through Physical Control Channel Fingerprinting: A Deep Semi-Supervised Approach
title_sort detecting mobile traffic anomalies through physical control channel fingerprinting a deep semi supervised approach
topic Anomaly detection
LTE
5G
PDCCH
mobile networks
traffic prediction
url https://ieeexplore.ieee.org/document/8871152/
work_keys_str_mv AT hoangduytrinh detectingmobiletrafficanomaliesthroughphysicalcontrolchannelfingerprintingadeepsemisupervisedapproach
AT enginzeydan detectingmobiletrafficanomaliesthroughphysicalcontrolchannelfingerprintingadeepsemisupervisedapproach
AT lorenzagiupponi detectingmobiletrafficanomaliesthroughphysicalcontrolchannelfingerprintingadeepsemisupervisedapproach
AT paolodini detectingmobiletrafficanomaliesthroughphysicalcontrolchannelfingerprintingadeepsemisupervisedapproach