Sign inGet started
Paper · arXiv

Few-Shot Network Intrusion Detection Using Online Triplet Mining

Network intrusion detection systems play a vital role in protecting networks by detecting malicious network traffic which can then be investigated by a cybersecurity operations centre. State-of-the-art approaches utilise supervised machine learning methods to train a classification model to recognise known cyberattacks; however, these models require a large labelled dataset to train and show poor performance when trained on smaller datasets. In an attempt to address this shortcoming, anomaly detection models learn the distribution of benign traffic and flag non-conforming traffic as malicious. While these methods do not require malicious examples to train, they suffer from high false-posi...

AuthorsJack Wilkie, Hanan Hindy, Christos Tachtatzis et al.
Primary categorycs.CR
Published17 May 2026
Last updated at source17 May 2026
cs.CRcs.AIcs.LGcs.NI
Embed this entry
<iframe src="https://silytics.si/embed/item/b9eab0f9-b5a9-4868-b7d7-facc9fee1ef6" width="420" height="190" style="border:0" loading="lazy" title="Silytics entry"></iframe>

Free, no tracking. More about feeds and embeds.

Silytics shows public metadata from arXiv and links to the original. Information may be incomplete or out of date. Last refreshed 17 October 2026. Licenses and terms of the original apply to the work itself. Not financial, legal or professional advice.