arrow
返回

Cloud security modeling: using TCP deltas with data analytics and machine learning techniques

delete2025-02-25
delete0
PRE
AI
H
Hussain, Mohamed Fazil
H
Hasan, Salwa Sayeedul *
R
Rauf, Hasan *
DOI:10.1007/s10586-024-04884-8delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The 21st-century surge in computing infrastructure across mobile, centralized, and decentralized realms in the cloud has ushered in a new era of diverse applications, along with its Nemesis the Cybercrime. However, this progress comes hand in hand with amplified security risks, such as Ransomware Attacks by a honeypot user and delays in user response while the governing applications and back end are exposed to constant static/dynamic security scans. Security measures such as Multi-Factor Authentication, Strong Passwords, Network Segmentation, Endpoint Security, Robust Firewall and Intrusion Detection systems, and user awareness are on the Rise. Still, these efforts fall short when endpoint security fails to name a few.In this paper, a study is conducted that delves into the use of Data Analytics/ Machine Learning (ML) techniques using the TCP/IP 3-way handshake data (viz TCP.Delta Times). The methodology works on various network-related objectives. The proposed methodology is void of any neural net training, or deep packet introspection which cannot be achieved in a real-time. The proposed methodology is implemented on two network/security issues, (1) Flagging suspicious activities by a honeypot user or ransomware user and alerting the network administrator as part of their CI/CD process, and (2) Measuring user lag in accessing back-end resources when the application is under a continuous static/dynamic scan. The proposed methodology was successfully used as a pilot run in two enterprises with great results.
Keyword:
Mobile edge & fog computing
Security
Load balancer server side
Ransomware
TCP.delta
Data mining
K-means clustering
Outliers

期刊

C
Cluster Computing-The Journal of Networks Software Tools and Applications
IF:
4.1
论文数:
5.1K
被引数:
7.5K

机构

A
AT&T
学者数:
811
论文数: 717
被引数: 460
引用论文

引用论文

err分享
err收藏
The Atmospheric Radiation Measurement Program Cloud Radars: Operational Modes
err1999-07-01
err0
errOAAI
errEugene E. Clothiaux; Kenneth P. Moran; Brooks E. Martner; Thomas P. Ackerman; Gerald G. Mace; Taneil Uttal; James H. Mather; Kevin B. Widener; Mark A. Miller; Daniel J. Rodriguez
err分享
err收藏
Potato Glycoalkaloids: Chemistry, Analysis, Safety, and Plant Physiology
err2010-09-22
err0
PREAI
errMendel Friedman; Gary M. McDonald; MaryAnn Filadelfi-Keszi
err分享
err收藏
Positions and QQ plots
err2004-11-01
err67
errOAAI
errMarden, JI
err分享
err收藏
A privacy-conserving framework based intrusion detection method for detecting and recognizing malicious behaviours in cyber-physical power networks
err2021-03-05
err64
PREAI
errKhan, Izhar Ahmed; Pi, Dechang; Khan, Nasrullah; Khan, Zaheer Ullah; Hussain, Yasir; Nawaz, Asif; Ali, Farman
err分享
err收藏
A New Explainable Deep Learning Framework for Cyber Threat Discovery in Industrial IoT Networks
err2022-07-01
err47
PREAI
errKhan, Izhar Ahmed; Moustafa, Nour; Pi, Dechang; Sallam, Karam M.; Zomaya, Albert Y.; Li, Bentian
err分享
err收藏
Multivariate network traffic analysis using clustered patterns使用群集模式的多变量网络流量分析
err2018-04-28
err13
errOAAI
errKim, Jinoh; Sim, Alex; Tierney, Brian; Suh, Sang; Kim, Ikkyun
err分享
err收藏
没有更多内容