Skip to main content

A Review of Anomalies Detection Based on Association Rules Techniques

  • Conference paper
  • First Online:
Innovations in Smart Cities Applications Volume 4 (SCA 2020)

Part of the book series: Lecture Notes in Networks and Systems ((LNNS,volume 183))

  • 2782 Accesses

Abstract

The primary challenge of anomaly detection often result in reducing high false positive rates. Most studies present different data mining techniques to handle this issue. Association rules is one of these techniques, discovers frequent patterns, correlations, associations, or causal structures among huge number of objects or items in transaction databases, relational databases, and other information repositories. This paper presents a comprehensive review of the literature on the techniques of association rules, in works of the last ten years. The findings of this review show that the most used technique was the well-known Apriori algorithm combined with fuzzy logic.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 169.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 219.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Agrawal, R., Imielinski, T., Swami, A.: Database mining: a performance perspective. IEEE Trans. Knowl. Data Eng. 5(6), 914–925 (1993)

    Article  Google Scholar 

  2. Sadgali, I., Sael, N., Benabbou, F.: Adaptive model for credit card fraud detection. Int. J. Interact. Mob. Technol. 14(3), 54 (2020)

    Google Scholar 

  3. Askari, S, Hussain, A.: Credit card fraud detection using fuzzy ID3. In: IEEE, Computing, Communication and Automation (ICCCA), pp. 446–452 (2017)

    Google Scholar 

  4. Kou, Y., Lu, C.T., Sirwongwattana, S., Huang, Y.P.: Survey of fraud detection techniques. In: Proceedings of the International Conference on Networking, Sensing, and Control, pp. 749–754 (2004)

    Google Scholar 

  5. Bolton, R.J., Hand, D.J.: Unsupervised profiling methods for fraud detection. In: Conference of Credit Scoring and Credit Control VII, Edinburgh, UK (2001)

    Google Scholar 

  6. Shaari, F., Ahmad, A., Abu Bakar, A.: Finding meaningful outliers by incorporating negative association rules in Frequent Pattern Outlier Detection Method. In: Proceeding of the 12th International Conference on Intelligent Systems Design and Applications (ISDA), pp. 876–879 (2012)

    Google Scholar 

  7. Tackett, J.A.: Association rules for fraud detection. J. Corp. Account. Finance 24, 15–22 (2013)

    Google Scholar 

  8. Chandarana, R.: Survey of Network Intrusion Detection. http://www.cs.queensu.ca/~ricky/papers/networkIntrusionDetection.pdf

  9. Namik, A.F., Othman, Z.A.: Reducing network intrusion detection association rules using chi-squared pruning technique. In: Proceeding of the Third Conference on Data Mining and Optimization (DMO), pp. 122–127 (2011)

    Google Scholar 

  10. Su, M.-Y., Lin, C.-Y., Chien, S.-W., Hsu, H.-C.: Genetic-fuzzy association rules for network intrusion detection systems. In: Proceeding of IEEE International Conference on Fuzzy Systems, pp. 2046–2052 (2011)

    Google Scholar 

  11. Zhang, B.: Research of intrusion detection technology based on association rules. In: Proceedings of SPIE - The International Society for Optical Engineering (2011)

    Google Scholar 

  12. Douzi, S., Benchaji, I., El Ouahidi, B.: Hybrid approach for intrusion detection using fuzzy association rules. In: Proceeding of the 2nd Cyber Security in Networking Conference (CSNet) (2018)

    Google Scholar 

  13. Boonyopakorn, P.: The optimization and enhancement of network intrusion detection through fuzzy association rules. In: Proceeding of the 6th International Conference on Technical Education (ICTechEd6) (2019)

    Google Scholar 

  14. Othman, Z.A., Eljadi, E.E.: Network anomaly detection tools based on association rules. In: Proceeding of the International Conference on Electrical Engineering and Informatics (2011)

    Google Scholar 

  15. Wang, H., Zhang, G., Chan, H., Jiang, X.: Mining association rules for intrusion detection. In: Proceeding of the International Conference on Frontier of Computer Science and Technology (2009)

    Google Scholar 

  16. Chave, R., Ramirez, J., Gorriz, J.M., Illanl, I.A.: FDG and PIB biomarker PET analysis for the Alzheimer’s disease detection using association rules. In: Proceeding of IEEE Nuclear Science Symposium and Medical Imaging Conference Record (NSS/MIC) (2012)

    Google Scholar 

  17. IIIan, I., Gorriz, J., Ramirez, J., Chaves, R., Segovia, F., López, M., Salas-Gonzalez, D., Puntonet, C.: Machine learning for very early Alzheimer’s disease diagnosis, a 18F-FDG and PiB PET comparison. In: IEEE Nuclear Science Symposium and Medical Image Conference, pp. 2334–2337 (2010)

    Google Scholar 

  18. Cao, H.-Â., Wijaya, T.K., Aberer, K., Nunes, N.: Temporal association rules for electrical activity detection in residential homes. In: Proceeding of the IEEE International Conference on Big Data (Big Data), pp. 3097–3106 (2016)

    Google Scholar 

  19. Nguyen, T., Le, L.: Detection of SNP-SNP interactions in genome-wide association data using random forests and association rules. In: Proceeding of 12th International Conference on Software, Knowledge, Information Management & Applications (SKIMA) (2018)

    Google Scholar 

  20. Agrawal, R., Imielinski, T., Swami, A.: Mining association rules between sets of items in large databases. In: Proceeding of the ACM SIGMOD, pp. 207–216 (1993)

    Google Scholar 

  21. He, Z., Xu, X., Deng, S., Huang, J.: A frequent pattern discovery method for outlier detection. In: WAIM 2004. Advances in Web-Age Information Management: 5th International Conference, WAIM 2004, Dalian, China, 15–17 July 2004, pp. 726–732 (2004b)

    Google Scholar 

  22. Xie, D. (Walter): Fuzzy association rules discovered on effective reduced database algorithm. In: Proceeding of the IEEE Conference on Fuzzy Systems, pp. 779–784 (2005)

    Google Scholar 

  23. Gao, Y., Ma, J., Ma, L.: A new algorithm for mining fuzzy association rules. In: Proceeding of the Conference on Machine Learning and Cybernetics, pp. 1635–1640 (2004)

    Google Scholar 

  24. Kuok, C., Fu, A., Wong, M.: Mining fuzzy association rules in databases. In: Proceeding of the ACM SIGMOD, pp. 41–46 (1998)

    Google Scholar 

  25. Tuncer, T., Tatar, Y.: Detection DoS attack on FPGA using fuzzy association rules. In: Proceeding of International Joint Conference of IEEE TrustCom-11/IEEE ICESS-11/FCST-1, pp. 1271–1276 (2011)

    Google Scholar 

  26. Lu, J., Lv, F., Liu, Q.-H., Zhang, M., Zhang, X.: Botnet detection based on fuzzy association rules. In: Proceeding of the 24th International Conference on Pattern Recognition (ICPR), pp. 578–584 (2018)

    Google Scholar 

  27. Bayardo Jr, R.J., Agrawal, R.: Mining the most interesting rules. In: Proceeding of the 5th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, San Diego, CA, USA (1999)

    Google Scholar 

  28. Dong, G., Li, J.: Efficient mining of emerging patterns: discovering trends and differences. In: Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, San Diego, USA, pp. 43–52. ACM (2004)

    Google Scholar 

  29. Hu, Y., Panda, B.: Identification of malicious transactions in database systems. In: Proceedings International Database Engineering and Applications Symposium, pp. 329–335 (2003)

    Google Scholar 

  30. Kim, G., Lee, S., Kim, S.: A novel hybrid intrusion detection method integrating anomaly detection with misuse detection. Expert Syst. Appl. 41, 1690–1700 (2014). https://doi.org/10.1016/j.eswa.2013.08.066

    Article  Google Scholar 

  31. Su, M.-Y., Yu, G.-J., Lin, C.-Y.: A real-time network intrusion detection system for large-scale attacks based on an incremental mining approach. Comput. Secur. 28(5), 301–309 (2009)

    Article  Google Scholar 

  32. Cipolla, E., Vella, F.: Boosting of association rules for robust emergency detection. In: Proceeding of the 11th International Conference on Signal-Image Technology & Internet-Based Systems, pp. 185–191 (2015)

    Google Scholar 

  33. Dean, J., Ghemawat, S., MapReduce: simplified data processing on large clusters. Commun. ACM 51(1), 107–113 (2008). http://doi.acm.org/10.1145/1327452.1327492

  34. Freund, Y., Schapire, R.E.: A decision-theoretic generalization of on-line learning and an application to boosting. J. Comput. Syst. Sci. 55(1), 119–139 (1997). http://dx.doi.org/10.1006/jcss.1997.1504

  35. Bian, P., Liang, B., Shi, W., Huang, J., Cai, Y., NAR-Miner: discovering negative association rules from code for bug detection. In: Proceedings of the 26th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, ESEC/FSE 2018, pp. 411–422 (2018)

    Google Scholar 

  36. de Padua, R., do Carmo, L.P., Rezende, S.O., de Carvalho, V.O.: An analysis on community detection and clustering algorithms on the post-processing of association rules. In: Proceeding of the International Joint Conference on Neural Networks (IJCNN) (2018)

    Google Scholar 

  37. Blei, D.M., Jordan, M.I.: Variational inference for Dirichlet process mixtures. Bayesian Anal. 1(1), 121–143 (2006)

    Article  MathSciNet  Google Scholar 

  38. Blei, D.M., Griffiths, T.L., Jordan, M.I.: The nested Chinese restaurant process and Bayesian nonparametric inference of topic hierarchies. J. ACM 57(2), 1–30 (2010)

    Article  MathSciNet  Google Scholar 

  39. Newman, M.E.J.: Networks: An Introduction. Oxford University Press, Oxford (2010)

    Google Scholar 

  40. Liu, J.J., Fan, X., Qu, Z.: A new interestingness measure of association rules. In: Proceedings of the Second International Conference on Genetic and Evolutionary Computing, pp. 393–397 (2008)

    Google Scholar 

  41. Thongtae, P., Srisuk, S.: An algorithm for reusable Uninteresting Rules in Association Rule Mining (2008)

    Google Scholar 

  42. Agrawal, R., Imielinski, T., Swami, A.: Mining Association Rules between set of itemsets in large database. In: Proceedings of the 1993 ACM SIGMOD International Conference, pp. 207–216 (1993)

    Google Scholar 

  43. Agarwal, R., Aggarwal, C., Prasad, V.: A tree projection algorithm for generation of frequent itemsets. J. Parallel Distrib. Comput. 61, 350-371 (2000)

    Google Scholar 

  44. Tsumoto, S., Mining positive and negative knowledge in clinical database based on rough set model. In: PKDD 2001. LNAI, vol. 2168 (2001)

    Google Scholar 

  45. Gang, Y., Li, C.: A novel mining algorithm for negative association rules. In: Global Congress on Intelligent Systems, pp. 212–219 (2009)

    Google Scholar 

  46. Abdul Kadir, A.S., Abu Bakar, A., Hamdan, A.Z.: Frequent absence and presence itemset for negative association rules mining. In: Proceeding of the International Conference on Intelligent System Designs and Applications (ISDA11), Cordoba, Spain (2010)

    Google Scholar 

  47. Cawley, G.C., Talbot, N.L.C.: Fast exact leave-one-out cross-validation of sparse least-squares support vector machines. Int. J. Neural Netw. 17(10), 1468–1475 (2004)

    Google Scholar 

  48. Sadgali, I., Sael, N., Benabbou, F.: Detection of credit card fraud: state of art. Int. J. Comput. Sci. Netw. Secur. 18(11), 76–83 (2018)

    Google Scholar 

  49. Webb, G.I.: Inclusive pruning: a new class of pruning axiom for unordered search and its application to classification learning. In: Proceeding of the 1996 Australian Computer Science Conference, pp. 1–10 (1996)

    Google Scholar 

  50. Mabu, S., Chen, C., Lu, N., Shimada, K., Hirasawa, K.: An intrusion-detection model based on fuzzy class-association-rule mining using genetic network programming. IEEE Trans. Syst. Man Cybern. Part C Appl. Rev. 41(1), 130–139 (2011)

    Google Scholar 

  51. Chen, C., Mabu, S., Yue, C., Shimada, K., Hirasawa, K.: Network intrusion detection using fuzzy class association rule mining based on genetic network programming. In: Proceeding of IEEE International Conference on Systems, Man and Cybernetics, San Antonio, TX, USA, pp. 60–67 (2009)

    Google Scholar 

  52. Tripathi, D., Nigam, B., Edla, D.R.: A novel web fraud detection technique using association rule mining. In: Proceeding of the 7th International Conference on Advances in Computing & Communications, ICACC-2017, Cochin, India (2017)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Imane Sadgali .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2021 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Sadgali, I., Sael, N., Benabbou, F. (2021). A Review of Anomalies Detection Based on Association Rules Techniques. In: Ben Ahmed, M., Rakıp Karaș, İ., Santos, D., Sergeyeva, O., Boudhir, A.A. (eds) Innovations in Smart Cities Applications Volume 4. SCA 2020. Lecture Notes in Networks and Systems, vol 183. Springer, Cham. https://doi.org/10.1007/978-3-030-66840-2_88

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-66840-2_88

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-66839-6

  • Online ISBN: 978-3-030-66840-2

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics