Real Time Multistage Attack Detection Leveraging Machine Learning and MITRE Framework

Takey, Yuvraj Sanjayrao; Tatikayala, Sai Gopal; Patil, Mahesh U.; R, Lakshmi Eswari P.; Samavedam, Satyanadha Sarma

doi:10.1109/smart55829.2022.10047248

Cited by 1 publication

(1 citation statement)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the domain of data analysis, comparing the similarity of data strings, such as message hashes or fingerprints [23], often requires the application of the theory of metric space and metrics. The authors in [24] proposed a method for detecting multistage attacks using machine learning to process malware events. Inspiration can also be found in slightly different solutions, for example, for Android systems [25], where the method is based on obtaining features from the Android package kit file format.…”

Section: Related Workmentioning

confidence: 99%

Multistage Malware Detection Method for Backup Systems

Novak,

Oujezsky,

Kaura

et al. 2024

Technologies

View full text Add to dashboard Cite

This paper proposes an innovative solution to address the challenge of detecting latent malware in backup systems. The proposed detection system utilizes a multifaceted approach that combines similarity analysis with machine learning algorithms to improve malware detection. The results demonstrate the potential of advanced similarity search techniques, powered by the Faiss model, in strengthening malware discovery within system backups and network traffic. Implementing these techniques will lead to more resilient cybersecurity practices, protecting essential systems from hidden malware threats. This paper’s findings underscore the potential of advanced similarity search techniques to enhance malware discovery in system backups and network traffic, and the implications of implementing these techniques include more resilient cybersecurity practices and protecting essential systems from malicious threats hidden within backup archives and network data. The integration of AI methods improves the system’s efficiency and speed, making the proposed system more practical for real-world cybersecurity. This paper’s contribution is a novel and comprehensive solution designed to detect latent malware in backups, preventing the backup of compromised systems. The system comprises multiple analytical components, including a system file change detector, an agent to monitor network traffic, and a firewall, all integrated into a central decision-making unit. The current progress of the research and future steps are discussed, highlighting the contributions of this project and potential enhancements to improve cybersecurity practices.

show abstract

Section: Related Workmentioning

confidence: 99%