scispace - formally typeset
Journal ArticleDOI

A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection

TLDR
The complexity of ML/DM algorithms is addressed, discussion of challenges for using ML/ DM for cyber security is presented, and some recommendations on when to use a given method are provided.
Abstract
This survey paper describes a focused literature survey of machine learning (ML) and data mining (DM) methods for cyber analytics in support of intrusion detection. Short tutorial descriptions of each ML/DM method are provided. Based on the number of citations or the relevance of an emerging method, papers representing each method were identified, read, and summarized. Because data are so important in ML/DM approaches, some well-known cyber data sets used in ML/DM are described. The complexity of ML/DM algorithms is addressed, discussion of challenges for using ML/DM for cyber security is presented, and some recommendations on when to use a given method are provided.

read more

Citations
More filters
Journal ArticleDOI

Unsupervised Outlier Detection via Transformation Invariant Autoencoder

TL;DR: In this article, a transformation invariant autoencoder (TIAE) is proposed for unsupervised outlier detection in complex image datasets, where the most confident inliers likely examples in each epoch are used as the training set.
Journal ArticleDOI

Preventing crimes against public health with artificial intelligence and machine learning capabilities

TL;DR: The prediction model established by artificial intelligence algorithm can effectively predict criminal behaviors that endanger public health and provide reliable data for prevention.
Journal ArticleDOI

Threat Detection and Investigation with System-level Provenance Graphs: A Survey

TL;DR: A comprehensive provenance graph-based threat detection system can be divided into three modules, namely, "data collection module", "data management module", and "threat detection modules", and the strategy of technology selection is given.
Proceedings ArticleDOI

On the Evaluation of Sequential Machine Learning for Network Intrusion Detection

TL;DR: In this article, the authors proposed a detailed methodology to extract temporal sequences of NetFlow that denote patterns of malicious activities, and applied this methodology to compare the efficacy of sequential learning models against traditional static learning models.
Journal ArticleDOI

On the performance of intelligent techniques for intensive and stealthy DDos detection

TL;DR: A taxonomy of the ML-based DDoS detection schemes, focusing on the important features and mechanisms that each scheme uses to detect and mitigate the impact of these attacks, and shows that the class imbalance problem significantly impact performance.
References
More filters
Journal ArticleDOI

Random Forests

TL;DR: Internal estimates monitor error, strength, and correlation and these are used to show the response to increasing the number of features used in the forest, and are also applicable to regression.
Book

Fuzzy sets

TL;DR: A separation theorem for convex fuzzy sets is proved without requiring that the fuzzy sets be disjoint.
Book

The Nature of Statistical Learning Theory

TL;DR: Setting of the learning problem consistency of learning processes bounds on the rate of convergence ofLearning processes controlling the generalization ability of learning process constructing learning algorithms what is important in learning theory?
Journal ArticleDOI

Collective dynamics of small-world networks

TL;DR: Simple models of networks that can be tuned through this middle ground: regular networks ‘rewired’ to introduce increasing amounts of disorder are explored, finding that these systems can be highly clustered, like regular lattices, yet have small characteristic path lengths, like random graphs.
Related Papers (5)