Suspicious Network Event Recognition Using Modified Stacking Ensemble Machine Learning
AFM Huang, Y Chi-Wei, HC Tai… - … Conference on Big …, 2019 - ieeexplore.ieee.org
AFM Huang, Y Chi-Wei, HC Tai, Y Chuan, JJC Huang, YH Liao
2019 IEEE International Conference on Big Data (Big Data), 2019•ieeexplore.ieee.orgThis study aims to detect genuine suspicious events and false alarms within a dataset of
network traffic alerts. The rapid development of cloud computing and artificial intelligence-
oriented automatic services have enabled a large amount of data and information to be
transmitted among network nodes. However, the amount of cyber-threats, cyberattacks, and
network intrusions have increased in various domains of network environments. Based on
the fields of data science and machine learning, this paper proposes a series of solutions …
network traffic alerts. The rapid development of cloud computing and artificial intelligence-
oriented automatic services have enabled a large amount of data and information to be
transmitted among network nodes. However, the amount of cyber-threats, cyberattacks, and
network intrusions have increased in various domains of network environments. Based on
the fields of data science and machine learning, this paper proposes a series of solutions …
This study aims to detect genuine suspicious events and false alarms within a dataset of network traffic alerts. The rapid development of cloud computing and artificial intelligence-oriented automatic services have enabled a large amount of data and information to be transmitted among network nodes. However, the amount of cyber-threats, cyberattacks, and network intrusions have increased in various domains of network environments. Based on the fields of data science and machine learning, this paper proposes a series of solutions involving data preprocessing, exploratory data analysis, new features creation, features selection, ensemble learning, models construction, and verification to identify suspicious network events. This paper proposes a modified form of stacking ensemble machine learning which includes AdaBoost, Neural Networks, Random Forest, LightGBM, and Extremely Randomised Trees (Extra Trees) to realise a high-performance classification. A suspicious network event recognition dataset for a security operations centre, which uses real network log observations from the 2019 IEEE BigData Cup Challenge, is used as an experimental dataset. This paper investigates the possibility of integrating big-data analytics, machine learning, and data science to improve intelligent cybersecurity.
ieeexplore.ieee.org
Showing the best result for this search. See all results