Anomaly detection in Endpoint Detection and Response (EDR) is a critical task in cybersecurity programs of large companies. With rapidly growing amounts of data and the omnipresence of zero-day attacks, manual and rule-based detection techniques are no longer eligible in practice. While classical machine learning approaches to this problem exist, they frequently show unsatisfactory performance in differentiating malicious from benign anomalies. A promising approach to attain superior generalization compard to currently employed machine learning techniques is using quantum generative models. Allowing for the largest representation of data on available quantum hardware, we investigate Quantum-Annealing-based Quantum Boltzmann Machines (QBMs) for the given problem. We contribute the first fully unsupervised approach for the problem of anomaly detection using QBMs and evaluate its performance on an EDR-inspired synthetic dataset. Our results indicate that QBMs can outperform their classical analog (i.e., Restricted Boltzmann Machines) in terms of result quality and training steps in special cases. When employing Quantum Annealers from D-Wave Systems, we conclude that either more accurate classical simulators or substantially more QPU time is needed to conduct the necessary hyperparameter optimization allowing to replicate our simulation results on quantum hardware.
CITATION STYLE
Stein, J., Schuman, D., Benkard, M., Holger, T., Sajko, W., Kölle, M., … Linnhoff-Popien, C. (2024). Exploring Unsupervised Anomaly Detection with Quantum Boltzmann Machines in Fraud Detection. In International Conference on Agents and Artificial Intelligence (Vol. 2, pp. 177–185). Science and Technology Publications, Lda. https://doi.org/10.5220/0012326100003636
Mendeley helps you to discover research relevant for your work.