Machine Learning confronted with the operational constraints of detection systems

Abstract

Intrusion detection systems, traditionally based on signatures, have not escaped the recent appeal of machine learning techniques. While the results presented in academic research articles are often excellent, security experts still have many reservations about the use of Machine Learning in intrusion detection systems. They generally fear an inadequacy of these techniques to operational constraints, in particular because of a high level of expertise required, or a large number of false positives. In this article, we show that Machine Learning can be compatible with the operational constraints of detection systems. We explain how to build a detection model and present good practices to validate it before it goes into production. The methodology is illustrated by a case study on the detection of malicious PDF files and we offer a free tool, SecuML, to implement it.

Authors and Affiliations

Sridarala ramu, Daniel Osaku

Keywords

Related Articles

Exam preparation strategies and concerns of university students: gender and open access vs regulated system effects

The purpose of this study is to identify test preparation strategies and concerns of university students in the open and regulated education system. We surveyed 294 students (55.10% male, 44.90% female), 60.54% from the...

Impact of Industrial Atmospheric Emissions on Ambient Air Quality in Arzew Area, Oran State, Algeria

This work focuses on identifying the source of BTEX (Benzene, Toluene, Ethylbenzene, Xylene) emissions generated by hydrocarbon-related industrial activities and evaluation of its impact on ambient air quality according...

A constraint programming algorithm for finding leximin-optimal allocations

In the context of constraint programming, we propose an algorithm solving the following problem: allocate in an equitable and efficient way a finite set of objects to agents each having their own utilities, under admissi...

Strategic Information Systems and Artificial Intelligence in Business

Information systems are defined as systems that consist of a group of people, data records, and some manual and non-manual operations. These systems generally handle data and information related to each system, and it ca...

A new MPPT technique for optimal and efficient monitoring in case of environmental or load conditions variation

Due to the very high initial investment cost of photovoltaic systems and their low conversion efficiency, it is essential to operate PV generators at the point of maximum power (MPP). Within this framework, our first obj...

Download PDF file
  • EP ID EP694203
  • DOI https://doi.org/10.52502/ijitas.v1i1.6
  • Views 167
  • Downloads 1

How To Cite

Sridarala ramu, Daniel Osaku (2019). Machine Learning confronted with the operational constraints of detection systems. International Journal of Information Technology and Applied Sciences (IJITAS), 1(1), -. https://europub.co.uk/articles/-A-694203