On correlating network traffic for cyber threat intelligence: A Bloom filter approach

Atifi, Adil; Bou‐Harb, Elias

doi:10.1109/iwcmc.2017.7986317

Cited by 3 publications

(1 citation statement)

References 23 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Cabe ressaltar que os resultados apresentados neste trabalho abrangem os passos de 1 a 3 acima listados. A literatura traz diversas tentativas de se fazer correlação de dados e alcançar um estado de consciência situacional [3][4][5]. Entretanto, as abordagens são dependentes de diversos padrões de troca de dados de segurança que podem não ser utilizados, ou estarem mal-configurados ou indisponíveis.…”

Section: Conceitos/trabalhos Relacionadosunclassified

Uma Plataforma para Correlação, Visualização e Extração de Tendências de Dados de Segurança

Kawasaki

Penteado²,

Grégio

2021

Anais Do XII Computer on the Beach - COTB '21

View full text Add to dashboard Cite

Digital data production increases on a daily basis due to the widespreaduse of Internet and interconnected computing devices. Actingsecurity mechanisms may result in several types of information,if processed and correlated, since their output logs range from IPaddresses/regions to attack events. Hence, the application of datascience techniques is essential to extract knowledge and insightsfrom this massive amount of data. In this article, we present a platformfor cybersecurity data visualization in an effort to identifytrends, associations and patterns, which enable better data-drivendecisions. To prototype and test the proposed platform, we focusedon endpoint logs provided from a cybersecurity company. Theconclusions drawn from this study are that there is a substantialconcentration of victims in urbanized areas, notably the state capitals,as well as a higher risk level for Server Operating Systems.Nevertheless, these results are still preliminary, considering thelimitations of the dataset (few, specific samples from internal testingendpoints), but helped pave the way towards new models forfurther threat analysis.

show abstract

Section: Conceitos/trabalhos Relacionadosunclassified

Uma Plataforma para Correlação, Visualização e Extração de Tendências de Dados de Segurança

Kawasaki

Penteado²,

Grégio

2021

Anais Do XII Computer on the Beach - COTB '21

View full text Add to dashboard Cite

show abstract

Quantifying the Accuracy of Small Subnet-Equivalent Sampling of IPv4 Internet Background Radiation Datasets

Chindipha

Irwin²,

Herbert

2019

Proceedings of the South African Institute of Computer Scientists and Information Technologists 2019

View full text Add to dashboard Cite

SoK: An Evaluation of the Secure End User Experience on the Dark Net through Systematic Literature Review

Tazi

Shrestha

Cruz

et al. 2022

JCP

View full text Add to dashboard Cite

The World Wide Web (www) consists of the surface web, deep web, and Dark Web, depending on the content shared and the access to these network layers. Dark Web consists of the Dark Net overlay of networks that can be accessed through specific software and authorization schema. Dark Net has become a growing community where users focus on keeping their identities, personal information, and locations secret due to the diverse population base and well-known cyber threats. Furthermore, not much is known of Dark Net from the user perspective, where often there is a misunderstanding of the usage strategies. To understand this further, we conducted a systematic analysis of research relating to Dark Net privacy and security on N=200 academic papers, where we also explored the user side. An evaluation of secure end-user experience on the Dark Net establishes the motives of account initialization in overlaid networks such as Tor. This work delves into the evolution of Dark Net intelligence for improved cybercrime strategies across jurisdictions. The evaluation of the developing network infrastructure of the Dark Net raises meaningful questions on how to resolve the issue of increasing criminal activity on the Dark Web. We further examine the security features afforded to users, motives, and anonymity revocation. We also evaluate more closely nine user-study-focused papers revealing the importance of conducting more research in this area. Our detailed systematic review of Dark Net security clearly shows the apparent research gaps, especially in the user-focused studies emphasized in the paper.

show abstract

On correlating network traffic for cyber threat intelligence: A Bloom filter approach

Cited by 3 publications

References 23 publications

Uma Plataforma para Correlação, Visualização e Extração de Tendências de Dados de Segurança

Uma Plataforma para Correlação, Visualização e Extração de Tendências de Dados de Segurança

Quantifying the Accuracy of Small Subnet-Equivalent Sampling of IPv4 Internet Background Radiation Datasets

SoK: An Evaluation of the Secure End User Experience on the Dark Net through Systematic Literature Review

Contact Info

Product

Resources

About