An intelligent defense and filtration platform for network traffic

Mehrnoosh Monshizadeh; Vikramajeet Khatri; Buse Atli; Raimo Kantola

doi:10.1007/978-3-030-02931-9_9

An intelligent defense and filtration platform for network traffic

Mehrnoosh Monshizadeh^*, Vikramajeet Khatri, Buse Atli, Raimo Kantola

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

2 Citations (Scopus)

Abstract

Hybrid Anomaly Detection Model (HADM) is a security platform to detect and prevent cyber-attacks on communication networks. The platform uses a combination of linear and learning algorithms combined with protocol analyzer. The linear algorithms filter and extract distinctive attributes and features of the cyber-attacks while the learning algorithms use these attributes and features to identify new types of cyber-attacks. The protocol analyzer in this platform classifies and filters vulnerable protocols to avoid unnecessary computation load. The use of linear algorithms in conjunction with learning algorithms allows the HADM to achieve improved efficiency in terms of accuracy and computation time in order to detect cyber-attacks over existing solutions.

Original language	English
Title of host publication	Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings
Editors	Kaushik Roy Chowdhury, Marco Di Felice, Bo Sheng, Ibrahim Matta
Publisher	SPRINGER
Chapter	2
Pages	107-118
Number of pages	12
ISBN (Electronic)	978-3-030-02931-9
ISBN (Print)	978-3-030-02930-2
DOIs	https://doi.org/10.1007/978-3-030-02931-9_9
Publication status	Published - 1 Jan 2018
MoE publication type	A4 Article in a conference publication
Event	International Conference on Wired/Wireless Internet Communications - Boston, United States Duration: 18 Jun 2018 → 20 Jun 2018 Conference number: 16

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	10866 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	International Conference on Wired/Wireless Internet Communications
Abbreviated title	WWIC
Country/Territory	United States
City	Boston
Period	18/06/2018 → 20/06/2018

Keywords

Anomaly detection
Cloud computing
Internet of things
Machine learning
Security

Access to Document

10.1007/978-3-030-02931-9_9

OpenUrl availability

Full text

Cite this

Monshizadeh, M., Khatri, V., Atli, B., & Kantola, R. (2018). An intelligent defense and filtration platform for network traffic. In K. R. Chowdhury, M. Di Felice, B. Sheng, & I. Matta (Eds.), Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings (pp. 107-118). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 10866 LNCS). SPRINGER. https://doi.org/10.1007/978-3-030-02931-9_9

Monshizadeh, Mehrnoosh ; Khatri, Vikramajeet ; Atli, Buse et al. / An intelligent defense and filtration platform for network traffic. Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings. editor / Kaushik Roy Chowdhury ; Marco Di Felice ; Bo Sheng ; Ibrahim Matta. SPRINGER, 2018. pp. 107-118 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{2882434d7eaa48f3a629b4b15ccd65ec,

title = "An intelligent defense and filtration platform for network traffic",

abstract = "Hybrid Anomaly Detection Model (HADM) is a security platform to detect and prevent cyber-attacks on communication networks. The platform uses a combination of linear and learning algorithms combined with protocol analyzer. The linear algorithms filter and extract distinctive attributes and features of the cyber-attacks while the learning algorithms use these attributes and features to identify new types of cyber-attacks. The protocol analyzer in this platform classifies and filters vulnerable protocols to avoid unnecessary computation load. The use of linear algorithms in conjunction with learning algorithms allows the HADM to achieve improved efficiency in terms of accuracy and computation time in order to detect cyber-attacks over existing solutions.",

keywords = "Anomaly detection, Cloud computing, Internet of things, Machine learning, Security",

author = "Mehrnoosh Monshizadeh and Vikramajeet Khatri and Buse Atli and Raimo Kantola",

year = "2018",

month = jan,

day = "1",

doi = "10.1007/978-3-030-02931-9_9",

language = "English",

isbn = "978-3-030-02930-2",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "SPRINGER",

pages = "107--118",

editor = "Chowdhury, {Kaushik Roy} and {Di Felice}, Marco and Bo Sheng and Ibrahim Matta",

booktitle = "Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings",

address = "Germany",

note = "International Conference on Wired/Wireless Internet Communications, WWIC ; Conference date: 18-06-2018 Through 20-06-2018",

}

Monshizadeh, M, Khatri, V, Atli, B & Kantola, R 2018, An intelligent defense and filtration platform for network traffic. in KR Chowdhury, M Di Felice, B Sheng & I Matta (eds), Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 10866 LNCS, SPRINGER, pp. 107-118, International Conference on Wired/Wireless Internet Communications, Boston, Massachusetts, United States, 18/06/2018. https://doi.org/10.1007/978-3-030-02931-9_9

An intelligent defense and filtration platform for network traffic. / Monshizadeh, Mehrnoosh; Khatri, Vikramajeet; Atli, Buse et al.

Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings. ed. / Kaushik Roy Chowdhury; Marco Di Felice; Bo Sheng; Ibrahim Matta. SPRINGER, 2018. p. 107-118 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 10866 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Scientific › peer-review

TY - GEN

T1 - An intelligent defense and filtration platform for network traffic

AU - Monshizadeh, Mehrnoosh

AU - Khatri, Vikramajeet

AU - Atli, Buse

AU - Kantola, Raimo

N1 - Conference code: 16

PY - 2018/1/1

Y1 - 2018/1/1

N2 - Hybrid Anomaly Detection Model (HADM) is a security platform to detect and prevent cyber-attacks on communication networks. The platform uses a combination of linear and learning algorithms combined with protocol analyzer. The linear algorithms filter and extract distinctive attributes and features of the cyber-attacks while the learning algorithms use these attributes and features to identify new types of cyber-attacks. The protocol analyzer in this platform classifies and filters vulnerable protocols to avoid unnecessary computation load. The use of linear algorithms in conjunction with learning algorithms allows the HADM to achieve improved efficiency in terms of accuracy and computation time in order to detect cyber-attacks over existing solutions.

AB - Hybrid Anomaly Detection Model (HADM) is a security platform to detect and prevent cyber-attacks on communication networks. The platform uses a combination of linear and learning algorithms combined with protocol analyzer. The linear algorithms filter and extract distinctive attributes and features of the cyber-attacks while the learning algorithms use these attributes and features to identify new types of cyber-attacks. The protocol analyzer in this platform classifies and filters vulnerable protocols to avoid unnecessary computation load. The use of linear algorithms in conjunction with learning algorithms allows the HADM to achieve improved efficiency in terms of accuracy and computation time in order to detect cyber-attacks over existing solutions.

KW - Anomaly detection

KW - Cloud computing

KW - Internet of things

KW - Machine learning

KW - Security

UR - http://www.scopus.com/inward/record.url?scp=85059695698&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-02931-9_9

DO - 10.1007/978-3-030-02931-9_9

M3 - Conference contribution

AN - SCOPUS:85059695698

SN - 978-3-030-02930-2

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 107

EP - 118

BT - Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings

A2 - Chowdhury, Kaushik Roy

A2 - Di Felice, Marco

A2 - Sheng, Bo

A2 - Matta, Ibrahim

PB - SPRINGER

T2 - International Conference on Wired/Wireless Internet Communications

Y2 - 18 June 2018 through 20 June 2018

ER -

Monshizadeh M, Khatri V, Atli B , Kantola R. An intelligent defense and filtration platform for network traffic. In Chowdhury KR, Di Felice M, Sheng B, Matta I, editors, Wired/Wireless Internet Communications - 16th IFIP WG 6.2 International Conference, WWIC 2018, Proceedings. SPRINGER. 2018. p. 107-118. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-02931-9_9

An intelligent defense and filtration platform for network traffic

Abstract

Publication series

Conference

Keywords

Access to Document

OpenUrl availability

Other files and links

Fingerprint

Cite this