Machine Learning Fingerprinting Methods in Cyber Security Domain: Which one to Use?

• Autoři: LAŠTOVIČKA Martin; DUFKA Antonín; KOMÁRKOVÁ Jana
• Rok publikování: 2018
• Druh: Článek ve sborníku
• Konference: Proceedings of the 14th International Wireless Communications and Mobile Computing Conference
• Fakulta / Pracoviště MU: Ústav výpočetní techniky
• www: https://ieeexplore.ieee.org/abstract/document/8450406
• Doi: http://dx.doi.org/10.1109/IWCMC.2018.8450406
• Klíčová slova: Machine Learning; OS Fingerprinting; IPFIX; Cybersecurity

Přiložené soubory

• 2018-DACS-machine-learning-fingerprinting-methods-in-cyber-security-domain-which-one-to-use-paper.pdf
• 2018-DACS-machine-learning-fingerprinting-methods-in-cyber-security-domain-which-one-to-use-presentation.pdf

• Popis: Identification of a communicating device operating system is a fundamental part of network situational awareness. However, current networks are large and change often which implies the need for a system that will be able to continuously monitor the network and handle changes in identified operating systems. The aim of this paper is to compare machine learning methods performance for OS fingerprinting on real-world data in the terms of processing time, memory requirements, and performance measures of accuracy, precision, and recall.

Související projekty

• Výzkum nástrojů pro hodnocení kybernetické situace a podporu rozhodování CSIRT týmů při ochraně kritické infrastruktury