Standardization of Intelligent Information of Specific Attack Trends

Rattan, Ashima; Kaur, Navroop; Bhushan, S.

doi:10.1007/978-981-13-0224-4_7

Search citation statements

Order By: Relevance

Paper Sections

Select...

Elk Stack1

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2021

2022

Publication Types

Select...

Article1

Preprint1

Relationship

Self Cite0

Independent2

Authors

Journals

Cited by 2 publications

(1 citation statement)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This work can get data from any source and format. Without changing the original system architecture, ELK Sack is built to instantly search and analyze data and ultimately use visual capabilities to present the analyzed data results [21]. NetFlow Log is the automated network log platform built in this work.…”

Section: Elk Stackmentioning

confidence: 99%

Cyberattacks detection and analysis in a network log system using XGBoost with ELK stack

et al. 2022

View full text Add to dashboard Cite

show abstract

Section: Elk Stackmentioning

confidence: 99%

Cyberattacks detection and analysis in a network log system using XGBoost with ELK stack

et al. 2022

View full text Add to dashboard Cite

show abstract

Cyberattacks Detection and Analysis in a Network Log System Using XGBoost with ELK Stack

Yang¹,

Chan²,

Liu³

et al. 2021

Preprint

View full text Add to dashboard Cite

The usage of artificial intelligence and machine learning methods on cyberattacks increasing significantly recently. For the defense method of cyberattacks, it is possible to detect and identify the attack event by observing the log data and analyzing whether it has abnormal behavior or not. This paper implemented the ELK Stack network log system (NetFlow Log) to visually analyze log data and present several network attack behavior characteristics for further analysis. Additionally, this system evaluated the extreme gradient enhancement (XGBoost), Recurrent Neural Network (RNN), and Deep Neural Network (DNN) model for machine learning methods. Keras was used as a deep learning framework for building a model to detect the attack event. From the experiments, it can be confirmed that the XGBoost model has an accuracy rate of 96.01% for potential threats. The full attack data set can achieve 96.26% accuracy, which is better than RNN and DNN models.

show abstract

Standardization of Intelligent Information of Specific Attack Trends

Cited by 2 publications

References 14 publications

Cyberattacks detection and analysis in a network log system using XGBoost with ELK stack

Cyberattacks detection and analysis in a network log system using XGBoost with ELK stack

Cyberattacks Detection and Analysis in a Network Log System Using XGBoost with ELK Stack

Contact Info

Product

Resources

About