Ensembling to improve infected hosts detection

Título:

Ensembling to improve infected hosts detection

Autor:

Venosa, Paula

Colaboradores:

; García, Sebastián; Díaz, Francisco Javier

Temas:

SEGURIDAD INFORMÁTICA

En:

Congreso Argentino de Ciencias de la Computación (25to : 2019 : Río Cuarto, Córdoba) 

Resumen:

In this paper we describe the main ensemble learning techniques and their application in the cybersecurity threats detection. The state of the art in the use of ensemble learning techniques is presented here as an alternative to the current intrusion detection mechanisms, analyzing their advantages and disadvantages. We propose to incorporate ensemble learning to SLIPS, a behavioral-based intrusion detection and prevention system that uses machine learning algorithms to detect malicious behaviors, to obtain better results, taking advantage of the benefits of the SLIPS classifiers and modules. As part of this work we extend ensembling by considering algorithms from different domains (not machine learning domains), as Thread Intelligence. As a first stage of this project, performance tests of ensemble learning algorithms were performed to detect malware from flows evaluating its accuracy. The results of these tests are presented here, as well as the conclusions obtained and the future work.

URL/DOI:

http://sedici.unlp.edu.ar/handle/10915/90565

Palabras clave:

detección de intrusos

Medio:

Soporte electrónico

Tipo de documento:

Artículo

Descripción física:

1 archivo (824,2 kB)

Idioma:

Inglés

Publicación:

, 2019

Puede solicitar más fácilmente el ejemplar con: A1227

Ver estantes