SPRINT: Semi-supervised Prototypical Representation for Few-Shot Class-Incremental Tabular Learning
Organizations: Department of Computer Science, Virginia Tech, Blacksburg, VA, USA · Department of Computer Science, University of Texas at Dallas, Dallas, TX, USA · DEVCOM Army Research Laboratory, Adelphi, MD, USA · Department of Computer Science, University of California, Irvine, CA, USA
Abstract
Real-world systems must continuously adapt to novel concepts from limited data without forgetting previously acquired knowledge. While Few-Shot Class-Incremental Learning (FSCIL) is established in computer vision, its application to tabular domains remains largely unexplored. Unlike images, tabular streams (e.g., logs, sensors) offer abundant unlabeled data, a scarcity of expert annotations and negligible storage costs, features ignored by existing vision-based methods that rely on restrictive buffers. We introduce SPRINT, the first FSCIL framework tailored for tabular distributions. SPRINT introduces a mixed episodic training strategy that leverages confidence-based pseudo-labeling to enrich novel class representations and exploits low storage costs to retain base class history. Extensive evaluation across six diverse benchmarks spanning cybersecurity, healthcare, and ecological domains, demonstrates SPRINT's cross-domain robustness. It achieves a state-of-the-art average accuracy of 77.37% (5-shot), outperforming the strongest incremental baseline by 4.45%.
Figures & tables
| Dataset | Feat. | Base Classes ( ) | Incr. Classes ( ) | / Class |
|---|---|---|---|---|
| ACI-IoT-2023 ( Bastian et al., 2023 ) | 79 | Benign, Dictionary, OS Scan, Port Scan, Ping Sweep, Vuln. Scan | ICMP Flood, Slowloris, SYN Flood, DNS Flood | 2,000 |
| CIC-IDS2017 ( Sharafaldin et al., 2018 ) | 77 | BENIGN, PortScan, DDoS, FTP-Patator, SSH-Patator | DoS Hulk, DoS GoldenEye, DoS Slowhttptest, DoS slowloris | 2,000 |
| CIC-IoT2023 ( Neto et al., 2023 ) | 39 | BENIGN, DNS Spoofing, DoS: HTTP, SYN, TCP, UDP, Mirai: Greeth, Greip, UDPPlain, MITM, Recon: Host, OS, Port, Vuln. Scan | DDoS: Ack, HTTP, ICMP, ICMP-FRAG, PSHACK, RSTFIN, SynonymousIP, SYN, TCP, UDP, UDP-Frag | 2,000 |
| Obesity ( Palechor and la Hoz Manotas, 2019 ) | 31 | Insufficient Wgt, Normal Wgt, Overweight Lvl I, Overweight Lvl II | Obesity Type I, Obesity Type II, Obesity Type III | 100 |
| CovType ( Blackard, 1998 ) | 54 | Spruce/Fir, Lodgepole Pine, Ponderosa Pine, Cottonwood/Willow | Aspen, Douglas-fir, Krummholz | 2,000 |
| MNIST ( LeCun et al., 2010 ) | 784 | Digits: 0, 1, 2, 3, 4, 5 | Digits: 6, 7, 8, 9 | 2,000 |
| Method | ACI-IoT-2023 | Obesity | CICIDS2017 | CIC-IoT-2023 | CovType | MNIST | Average | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| PD | Acc | PD | Acc | PD | Acc | PD | Acc | PD | Acc | PD | Acc | Avg-PD | Avg-Acc | |
| CNN ProtoNet | 9.49 | 76.22 | 5.04 | 55.53 | 23.51 | 69.91 | 0.99 | 53.56 | 9.72 | 45.87 | 8.89 | 81.10 | 9.61 | 63.70 |
| FACT | 8.06 | 69.93 | 10.71 | 14.29 | 15.17 | 18.42 | -2.46 | 53.68 | 13.47 | 16.84 | 25.00 | 40.65 | 11.66 | 35.63 |
| MAML | 33.92 | 47.27 | 23.95 | 37.28 | 43.96 | 42.67 | 18.22 | 35.39 | 32.62 | 38.28 | 45.59 | 48.42 | 33.04 | 41.55 |
| Neuron Expansion | 12.33 | 85.79 | 22.60 | 59.45 | 20.92 | 74.01 | 30.71 | 60.39 | 30.33 | 50.08 | 27.13 | 70.90 | 24.00 | 66.77 |
| ProtoNet | 12.03 | 84.16 | 10.71 | 71.67 | 27.05 | 69.21 | 2.02 | 59.85 | 11.44 | 54.91 | 23.87 | 70.97 | 14.52 | 68.46 |
| Method | 5-shot | 10-shot | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | 1 | 2 | 3 | 4 | Imp. | 0 | 1 | 2 | 3 | 4 | Imp. | |
| CNN ProtoNet | 85.70 | 82.47 | 80.96 | 81.94 | 76.22 | +17.42 | 88.25 | 85.33 | 84.49 | 85.14 | 79.91 | +15.35 |
| FACT | 77.99 | 76.23 | 74.73 | 75.85 | 69.93 | +23.71 | 84.45 | 84.60 | 83.47 | 84.76 | 78.39 | +16.88 |
| MAML | 81.18 | 66.98 | 60.06 | 54.87 | 47.27 | +46.37 | 83.43 | 68.98 | 61.29 | 55.50 | 47.93 | +47.34 |
| Neuron Expansion | 98.11 | 88.58 | 88.38 | 88.05 | 85.79 | +7.85 | 98.16 | 92.28 | 90.71 | 91.06 | 89.98 | +5.29 |
| ProtoNet | 96.19 | 89.15 | 86.33 | 87.06 | 84.16 | +9.47 | 97.23 | 90.86 | 87.57 | 88.08 | 85.25 | +10.02 |
| Method | 1 | 2 | 3 | 4 |
|---|---|---|---|---|
| Baseline | 89.15 | 86.33 | 87.06 | 84.16 |
| + | 88.84 | 85.77 | 86.09 | 82.64 |
| + | 91.01 | 89.18 | 88.84 | 85.13 |
| SPRINT | 96.17 | 96.29 | 95.91 | 93.63 |
Appendix figures & tables12 assets
Supplementary material from the paper’s appendix.
Appendix
| Method | 100 Epochs | 200 Epochs | 300 Epochs | Speedup |
|---|---|---|---|---|
| iCaRL | ||||
| SPRINT |
| Parameter | Value | Description |
| Evaluation Protocol | ||
| Independent Runs | 30 | Number of distinct random seeds used for reporting means |
| Test Episodes | 500 | Number of episodes evaluated per run |
| Support Set Size | Matches the -shot setting ( Snell et al., 2017 ) | |
| Query Points ( ) | 15 | Number of query samples per class per episode |
| Training & Optimization | ||
| Method | ACI-IoT-2023 | Obesity | CICIDS2017 | CIC-IoT-2023 | CovType | MNIST | Average | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| PD | Acc | PD | Acc | PD | Acc | PD | Acc | PD | Acc | PD | Acc | Avg-PD | Avg-Acc | |
| CNN ProtoNet | 8.33 | 79.91 | 5.53 | 60.32 | 21.02 | 73.34 | 0.68 | 56.17 | 9.39 | 49.21 | 7.11 | 86.09 | 8.68 | 67.51 |
| FACT | 6.06 | 78.39 | 11.15 | 15.19 | 13.29 | 18.71 | -3.04 | 53.83 | 12.70 | 16.40 | 22.63 | 40.59 | 10.47 | 37.19 |
| MAML | 35.50 | 47.93 | 26.13 | 38.62 | 43.53 | 43.31 | 19.44 | 34.44 | 32.86 | 39.19 | 44.17 | 49.89 | 33.61 | 42.23 |
| Neuron Expansion | 8.18 | 89.98 | 14.40 | 67.74 | 17.54 | 77.22 | 28.77 | 62.15 | 28.60 | 51.94 | 19.40 | 78.68 | 19.48 | 71.29 |
| ProtoNet | 11.98 | 85.25 | 10.35 | 72.71 | 26.17 | 70.55 | 2.45 | 61.40 | 10.94 | 57.24 | 22.27 | 73.23 | 14.03 | 70.06 |
| Model | Compared To | Mean (%) | Cohen’s | (Bonf.) | Sig. |
|---|---|---|---|---|---|
| SPRINT | MAML | 46.366 | 23.14 | 0.001 | Yes |
| SPRINT | FACT | 23.707 | 1.88 | 0.001 | Yes |
| SPRINT | CNN ProtoNet | 17.417 | 12.40 | 0.001 | Yes |
| SPRINT | ProtoNet | 9.471 | 8.94 | 0.001 | Yes |
| SPRINT | Semi-Super-Proto | 8.502 | 5.18 | 0.001 | Yes |
| SPRINT | Neur. Exp. | 7.846 | 3.32 | 0.001 | Yes |
| Dataset | Mean (%) | Cohen’s | (Bonf.) | Sig. |
|---|---|---|---|---|
| ACI-IoT-2023 | 4.455 | 2.98 | 0.001 | Yes |
| CIC-IDS2017 | 2.571 | 1.11 | 0.001 | Yes |
| CIC-IoT-2023 | -5.421 | -4.02 | 1.00 | No |
| CovType | 4.897 | 4.60 | 0.001 | Yes |
| Obesity | 3.959 | 1.97 | 0.001 | Yes |
| MNIST | 13.852 | 6.96 | 0.001 | Yes |
| Model | Compared To | Mean (%) | Cohen’s d | p (Bonf.) | Signif. (Bonf.) |
|---|---|---|---|---|---|
| SPRINT | MAML | 40.129 | 16.57 | 0.001 | Yes |
| SPRINT | FACT | 64.381 | 17.88 | 0.001 | Yes |
| SPRINT | Semi-Super-ProtoNet | 15.332 | 6.70 | 0.001 | Yes |
| SPRINT | ProtoNet | 13.593 | 5.59 | 0.001 | Yes |
| SPRINT | CNN ProtoNet | 12.892 | 5.72 | 0.001 | Yes |
| SPRINT | Neuron Expansion | 8.790 | 1.87 | 0.001 | Yes |
| Dataset | STUNT | SPRINT | ||
|---|---|---|---|---|
| PD (%) | Acc (%) | PD (%) | Acc (%) | |
| ACI-IoT-2023 | -0.23 | 72.26 | 2.54 | 93.63 |
| CIC-IoT-2023 | -3.42 | 54.95 | -3.94 | 65.81 |
| CICIDS2017 | 10.99 | 57.58 | 13.45 | 82.80 |
| CovType | 12.91 | 45.65 | 10.62 | 58.36 |
| MNIST | 12.11 | 57.56 | 5.18 | 84.85 |
Class-Incremental Learning
Class-incremental learning studies how models can add new categories over time while retaining the ability to recognize previously learned classes.
See all 162 papers