An approach for detecting multi-institution attacks

IF 1.8 4区计算机科学 Q3 TELECOMMUNICATIONS

Annals of Telecommunications Pub Date : 2023-10-09 DOI:10.1007/s12243-023-00993-4

Saif Zabarah, Omar Naman, Mohammad A. Salahuddin, Raouf Boutaba, Samer Al-Kiswany

引用次数: 0

Abstract

We present Soteria, a data processing pipeline for detecting multi-institution attacks. Soteria uses a set of machine learning techniques to detect future attacks, predict their future targets, and rank attacks based on their predicted severity. Our evaluation with real data from Canada-wide academic institution networks shows that Soteria can predict future attacks with 95% recall rate, predict the next targets of an attack with 97% recall rate, and detect attacks in the first 20% of their life span. Soteria is deployed in production and is in use by tens of Canadian academic institutions that are part of the CANARIE IDS project.

Abstract Image

查看原文本刊更多论文

检测多机构攻击的方法

我们介绍了用于检测多机构攻击的数据处理管道 Soteria。Soteria 使用一系列机器学习技术来检测未来攻击、预测未来攻击目标，并根据预测的严重程度对攻击进行排序。我们使用加拿大学术机构网络的真实数据进行的评估表明，Soteria 可以以 95% 的召回率预测未来攻击，以 97% 的召回率预测攻击的下一个目标，并在攻击生命周期的前 20% 检测到攻击。Soteria 已部署到生产中，并被 CANARIE IDS 项目中的数十家加拿大学术机构使用。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

Annals of Telecommunications 工程技术-电信学

CiteScore

5.20

自引率

5.30%

发文量

审稿时长

4.5 months

期刊介绍： Annals of Telecommunications is an international journal publishing original peer-reviewed papers in the field of telecommunications. It covers all the essential branches of modern telecommunications, ranging from digital communications to communication networks and the internet, to software, protocols and services, uses and economics. This large spectrum of topics accounts for the rapid convergence through telecommunications of the underlying technologies in computers, communications, content management towards the emergence of the information and knowledge society. As a consequence, the Journal provides a medium for exchanging research results and technological achievements accomplished by the European and international scientific community from academia and industry.