Affiliation:
1. Communications Department, Universitat Politècnica de València, 46022 Valencia, Spain
Abstract
The number and the diversity in nature of daily cyber-attacks have increased in the last few years, and trends show that both will grow exponentially in the near future. Critical Infrastructures (CI) operators are not excluded from these issues; therefore, CIs’ Security Departments must have their own group of IT specialists to prevent and respond to cyber-attacks. To introduce more challenges in the existing cyber security landscape, many attacks are unknown until they spawn, even a long time after their initial actions, posing increasing difficulties on their detection and remediation. To be reactive against those cyber-attacks, usually defined as zero-day attacks, organizations must have Threat Hunters at their security departments that must be aware of unusual behaviors and Modus Operandi. Threat Hunters must face vast amounts of data (mainly benign and repetitive, and following predictable patterns) in short periods to detect any anomaly, with the associated cognitive overwhelming. The application of Artificial Intelligence, specifically Machine Learning (ML) techniques, can remarkably impact the real-time analysis of those data. Not only that, but providing the specialists with useful visualizations can significantly increase the Threat Hunters’ understanding of the issues that they are facing. Both of these can help to discriminate between harmless data and malicious data, alleviating analysts from the above-mentioned overload and providing means to enhance their Cyber Situational Awareness (CSA). This work aims to design a system architecture that helps Threat Hunters, using a Machine Learning approach and applying state-of-the-art visualization techniques in order to protect Critical Infrastructures based on a distributed, scalable and online configurable framework of interconnected modular components.
Subject
Artificial Intelligence,Computer Science Applications,Information Systems,Management Information Systems
Reference127 articles.
1. PRAETORIAN D3.1 Transitioning Risk Management, 2021, PRAETORIAN H2020 Project Deliverables, Not yet published.
2. Cyber security meets artificial intelligence: A survey;Li;Front. Inf. Technol. Electron. Eng.,2018
3. Is prediction nothing more than multi-scale pattern completion of the future?;Falandays;Brain Res.,2021
4. Thinking ahead: The role and roots of prediction in language comprehension;Federmeier;Psychophysiology,2007
5. The role of anticipation in cognition. In Proceedings of the AIP Conference Proceedings;Riegler;Am. Inst. Phys.,2001
Cited by
2 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献