Intrusion Detection Forecasting Using Time Series for Improving Cyber Defence
Journal Title: International Journal of Intelligent Systems and Applications in Engineering - Year 2015, Vol 3, Issue 1
Abstract
The strength of time series modeling is generally not used in almost all current intrusion detection and prevention systems. By having time series models, system administrators will be able to better plan resource allocation and system readiness to defend against malicious activities. In this paper, we address the knowledge gap by investigating the possible inclusion of a statistical based time series modeling that can be seamlessly integrated into existing cyber defense system. Cyber-attack processes exhibit long range dependence and in order to investigate such properties a new class of Generalized Autoregressive Moving Average (GARMA) can be used. In this paper, GARMA (1, 1; 1, ±) model is fitted to cyber-attack data sets. Two different estimation methods are used. Point forecasts to predict the attack rate possibly hours ahead of time also has been done and the performance of the models and estimation methods are discussed. The investigation of the case-study will confirm that by exploiting the statistical properties, it is possible to predict cyber-attacks (at least in terms of attack rate) with good accuracy. This kind of forecasting capability would provide sufficient early-warning time for defenders to adjust their defense configurations or resource allocations.
Authors and Affiliations
Azween Abdullah *| School of Computing and IT, Taylors University, Subang Jaya, Selangor, Malaysia, Thulasy Ramiah Pillai| School of Computing and IT, Taylors University, Subang Jaya, Selangor, Malaysia, Cai Long Zheng| Unitar International University, Petaling Jaya, Selangor, Malaysia, Vahideh Abaeian| School of Business, Taylors University, Subang Jaya, Selangor, Malaysia
A Mitigation Technique for Inrush Currents in Load Transformers for the Series Voltage Sag Compensator
In many countries, high-tech manufacturers concentrate in industry parks. Survey results suggest that 92% of interruption at industrial facilities is voltage sag related. An inrush mitigation technique is proposed and im...
A robust adaptive control of interleaved boost converter with power factor correction in wind energy systems
Power converters are generally utilized to convert the power from the wind sources to match the load demand and grid requirement to improve the dynamic and steady-state characteristics of wind generation systems and to i...
Using Word Embeddings for Ontology Enrichment
Word embeddings, distributed word representations in a reduced linear space, show a lot of promise for accomplishing Natural Language Processing (NLP) tasks in an unsupervised manner. In this study, we investigate if the...
Classification of Different Wheat Varieties by Using Data Mining Algorithms
There are various applications using computer-aided quality controlling system. In this study, seed data set acquired from UCI machine learning database was used. The purpose of the study is to perform the operations for...
Diagnosis of Anemia in Children via Artificial Neural Network
In this paper, a neural network algorithm, which diagnosis of anemia for children under 18 years of age, is presented. The network is trained by using data from hemogram test results from 30 patients and an ex...