A threat monitoring system for intelligent data analytics of network traffic

Autor(es)

Guimaraes, Lucas C. B. ^[1] ; Rebello, Gabriel Antonio F. ^[1] ; Camilo, Gustavo F. ^[1] ; de Souza, Lucas Airam C. ^[1] ; Duarte, Otto Carlos M. B. ^[1]

Afiliação do(s) autor(es)

^[1] Univ Fed Rio de Janeiro, Grp Teleinformat & Automacao, Rio De Janeiro - Brazil

• Tipo de documento: Artigo Científico
• Fonte: ANNALS OF TELECOMMUNICATIONS; OCT 2021.
• Citações Web of Science: 0

Resumo

Security attacks have been increasingly common and cause great harm to people and organizations. Late detection of such attacks increases the possibility of irreparable damage, with high financial losses being a common occurrence. This article proposes TeMIA-NT (ThrEat Monitoring and Intelligent data Analytics of Network Traffic), a real-time flow analysis system that uses parallel flow processing. The main contributions of the TeMIA-NT are (i) the proposal of an architecture for real-time detection of network intrusions that supports high traffic rates, (ii) the use of the structured streaming library, and (iii) two modes of operation: offline and online. The offline operation mode allows evaluating the performance of multiple machine learning algorithms over a given dataset, including metrics such as accuracy and F1-score. The proposed system uses dataframes and the structured streaming engine in online mode, which allows detection of threats in real-time and a quick reaction to attacks. To prevent or minimize the damage caused by security attacks, TeMIA-NT achieves flow-processing rates that reach 50 GB/s. (AU)

• Processo FAPESP: 15/24485-9 - Internet do futuro aplicada a cidades inteligentes
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 14/50937-1 - INCT 2014: da Internet do Futuro
• Beneficiário: Fabio Kon
• Modalidade de apoio: Auxílio à Pesquisa - Temático
• Processo FAPESP: 18/23292-0 - Projeto ACCRUE-SFI: infraestrutura avançada e colaborativa de pesquisa para internet do futuro segura
• Beneficiário: Otto Carlos Muniz Bandeira Duarte
• Modalidade de apoio: Auxílio à Pesquisa - Regular