Present and Future of Network Security Monitoring

Fuentes‐García, Marta; Camacho, José; Maciá‐Fernández, Gabriel

doi:10.1109/access.2021.3067106

Cited by 27 publications

(14 citation statements)

References 74 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The internet protocols have been viewed as a set of layers or protocol stack described according to the open system’s interconnections (OSI) into a seven-layered network [ 23 ]. Several protocols such as IPSec, SSL, and DNSSEC which have been proposed to provide end-to-end security solutions.…”

Section: Literature Reviewmentioning

confidence: 99%

Novel intelligent architecture and approximate solution for future networks

Sarhan

Jemmali

2023

PLoS ONE

View full text Add to dashboard Cite

Private networks have become popular for secure data sharing and anonymous communication in many domains: enterprise environments, military, journalism, telecommunication, healthcare, to name a few. It has been used with or without internet connection. Its primary purpose is to provide confidentiality, bypass unlawful activities, and protect against common threats such as interception, modification, and censorship. In addition, several private network technologies exist to support secure communications. However, they mostly rely on encryption only. The transmitted data is classified into different confidentiality levels. This research presents a smart private network architecture scheme that transmits constraint-based classified packets. The main directive of this work is the proposed constraint. This constraint is meant to enforce that if two packets belong to the same confidentiality level, they can’t be transmitted through the two routers simultaneously. Therefore, the studied problem is an NP-hard problem. This paper presents the following contributions: (i) proposes a new architecture paradigm for outsourcing a constraint-based multi-classified data sharing securely and transmitted through two routers; (ii) introduces several algorithms to prove the feasibility for this NP-Hard problem; and (iii) implements the algorithms solutions using C++ and compares their performance. Different metrics are used to measure the performance of the proposed algorithms. Randomized Longest Transmission time first algorithm R L T ¯ scored the best algorithm with a percentage of 73.5% and an average gap of 0.002 according to the experimental results. It is remarkable worthy to note that the execution time of all the algorithms is less than 0.001 s.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Novel intelligent architecture and approximate solution for future networks

Sarhan

Jemmali

2023

PLoS ONE

View full text Add to dashboard Cite

show abstract

“…To monitor uninterruptedly the services and operations, a Security Operation Center (SOC) is established. The SOC has become a priority for organizations since they are investing in their development to provide increased visibility to events throughout their networks [4]. Essentially, it is the centralized monitoring unit of the IT and network infrastructure and handles security issues on an organizational and technical level [5].…”

Section: Measuring Cyber Securitymentioning

confidence: 99%

“…The latter type offers a more finegrained visibility of the infrastructure's state. According to Fuentes-Garcia et al [4], a network security monitoring system should provide traceability of the processes of the network and systems under monitoring. However, to achieve this view, the setup should incorporate multiple components, such as those described subsequently.…”

Section: Ieee Instrumentation and Measurement Magazinementioning

confidence: 99%

Detecting Cyber Attacks through Measurements: Learnings from a Cyber Range

Mahmoud¹,

Αναγνωστόπουλος²,

Pedersen³

2022

IEEE Instrum. Meas. Mag.

View full text Add to dashboard Cite

“…In today's society, the Internet has affected the entire social process. e application for the Internet is becoming diversified, and the scale of netizens continues to show a trend of sustained and rapid development [1,2]. At this stage, China's cyber security situation is becoming more severe and complex, and cyber security incidents are becoming more complex.…”

Section: Introductionmentioning

confidence: 99%

Computer Network Intrusion Anomaly Detection with Recurrent Neural Network

2022

Mobile Information Systems

View full text Add to dashboard Cite

Network intrusion anomaly detection technique has been widely employed in computer network environments as a highly effective security prevention method. As network technology and network applications have advanced at a rapid pace, so too has network data traffic, resulting in an increase in virus and attack kinds. In the face of large-scale traffic and characteristic information, traditional intrusion detection will have problems such as low detection accuracy, high false negatives, and reliance on dimensionality reduction algorithms. Therefore, it is particularly important to establish a fast and efficient network intrusion anomaly detection method to deal with the current complex network environment. This work designs a computer network intrusion detection model with a recurrent neural network in order to explore a new intrusion detection method. The main purpose of this article include the following: (1) design a network security emergency response system architecture with the recurrent neural network model. This system consists of a management center module, a knowledge database module, a data acquisition module, a risk detection tool module, a risk analysis and processing module, a data protection module, and a remote connection auxiliary module. The modules cooperate with each other to complete system functions. (2) Aiming at the risk analysis and processing module, a network intrusion detection model combining bidirectional long short-term memory (BiLSTM) and deep neural network (DNN) is designed. In view of the lack of consideration of the before-and-after relevance of intrusion data features and the multifeature problem in existing models, the use of BiLSTM to extract the relevance between features and the use of DNN to extract deeper features are proposed. Aiming at the problem that the model lacks consideration of the importance of features, it is proposed to embed an attention mechanism into the network to increase consideration for the importance of features. (3) Massive experiments have verified the reliability and effectiveness of the method proposed in this work.

show abstract

Present and Future of Network Security Monitoring

Cited by 27 publications

References 74 publications

Novel intelligent architecture and approximate solution for future networks

Novel intelligent architecture and approximate solution for future networks

Detecting Cyber Attacks through Measurements: Learnings from a Cyber Range

Computer Network Intrusion Anomaly Detection with Recurrent Neural Network

Contact Info

Product

Resources

About