Terms of use

Terms of Use

The use of this site and the content contained therein is governed by the Terms of Use. When you use this site you acknowledge that you have read the Terms of Use and that you accept and will be bound by the terms hereof and such terms as may be modified from time to time.

All text, graphics, audio, design and other works on the site are the copyrighted works of nasscom unless otherwise indicated. All rights reserved.
Content on the site is for personal use only and may be downloaded provided the material is kept intact and there is no violation of the copyrights, trademarks, and other proprietary rights. Any alteration of the material or use of the material contained in the site for any other purpose is a violation of the copyright of nasscom and / or its affiliates or associates or of its third-party information providers. This material cannot be copied, reproduced, republished, uploaded, posted, transmitted or distributed in any way for non-personal use without obtaining the prior permission from nasscom.
The nasscom Members login is for the reference of only registered nasscom Member Companies.
nasscom reserves the right to modify the terms of use of any service without any liability. nasscom reserves the right to take all measures necessary to prevent access to any service or termination of service if the terms of use are not complied with or are contravened or there is any violation of copyright, trademark or other proprietary right.
From time to time nasscom may supplement these terms of use with additional terms pertaining to specific content (additional terms). Such additional terms are hereby incorporated by reference into these Terms of Use.

Disclaimer

The Company information provided on the nasscom web site is as per data collected by companies. nasscom is not liable on the authenticity of such data.
nasscom has exercised due diligence in checking the correctness and authenticity of the information contained in the site, but nasscom or any of its affiliates or associates or employees shall not be in any way responsible for any loss or damage that may arise to any person from any inadvertent error in the information contained in this site. The information from or through this site is provided "as is" and all warranties express or implied of any kind, regarding any matter pertaining to any service or channel, including without limitation the implied warranties of merchantability, fitness for a particular purpose, and non-infringement are disclaimed. nasscom and its affiliates and associates shall not be liable, at any time, for any failure of performance, error, omission, interruption, deletion, defect, delay in operation or transmission, computer virus, communications line failure, theft or destruction or unauthorised access to, alteration of, or use of information contained on the site. No representations, warranties or guarantees whatsoever are made as to the accuracy, adequacy, reliability, completeness, suitability or applicability of the information to a particular situation.
nasscom or its affiliates or associates or its employees do not provide any judgments or warranty in respect of the authenticity or correctness of the content of other services or sites to which links are provided. A link to another service or site is not an endorsement of any products or services on such site or the site.
The content provided is for information purposes alone and does not substitute for specific advice whether investment, legal, taxation or otherwise. nasscom disclaims all liability for damages caused by use of content on the site.
All responsibility and liability for any damages caused by downloading of any data is disclaimed.
nasscom reserves the right to modify, suspend / cancel, or discontinue any or all sections, or service at any time without notice.

For any grievances under the Information Technology Act 2000, please get in touch with Grievance Officer, Mr. Anirban Mandal at data-query@nasscom.in.

New

See all

No notification found.

An overview of Data Science for Cybersecurity from ML Perspective

rajeshwari

@rajeshwari1

October 18, 2022

Data Science & AI Community

227

Numerous security problems, such as unauthorized access, malware attack, zero-day assault, data breach, denial of service, social engineering or phishing, etc., have increased exponentially in recent years due to our increasing reliance on digitalization and the Internet of Things (IoT). For instance, less than 50 million distinct malware executables were known to the security industry in 2010. According to data from the German AV-TEST institute, by 2012, they had doubled to over 100 million. By 2019, more than 900 million malicious executables were known to the security community. Organizations, as well as individuals, may suffer significant financial losses as a result of cybercrime and attacks.

Data-driven intelligent decision-making from security data for smart cybersecurity solutions is the ultimate goal of cybersecurity data science. CDS represents a partial paradigm change from old, well-known security solutions like firewalls, user authentication, access control, cryptography systems, etc., that might not be successful in light of current needs in the cyber business.

As a result, many sophisticated assaults are developed and propagated across the Internet. While many researchers build cybersecurity models using various data analysis and learning techniques, as is outlined in the section titled "Machine learning tasks in cybersecurity," a thorough security model based on the successful discovery of security insights and the most recent security patterns may be more beneficial. We need to create more adaptable and effective security mechanisms to respond to attacks to handle this problem. We also need to update security policies to mitigate risks wisely and promptly. In order to do this, it is necessary to examine a vast amount of pertinent cybersecurity data produced from multiple sources, including network and system sources, and to find insights or appropriate security measures.

We first have a quick review of the concept and pertinent techniques to understand how cybersecurity data science might be applied to data-driven intelligent decision-making. In order to achieve this, we also examine and briefly explain various machine learning tasks in cybersecurity, outline distinct cybersecurity datasets, and highlight their application in various data-driven cybersecurity applications.

We next go over and highlight many related study topics and future directions in the field of cybersecurity data science, which could aid both academics and businesspeople in advancing research and development in pertinent application areas.

Finally, we present a general multi-layered architecture for the machine learning-based cybersecurity data science model. This framework briefly discusses how the cybersecurity data science model may be utilized to draw insights from security data and make data-driven intelligent decisions to create smart cybersecurity systems.

Cybersecurity data science

The availability of data is a key factor in data science. The foundation of cybersecurity data science is the dataset, which is often a collection of information records made up of various traits or features and related facts. As a result, it's critical to comprehend the nature of cybersecurity data which includes a variety of cyberattack types and pertinent elements. The rationale is that by analyzing the numerous patterns of security incidents or malicious conduct, raw security data gathered from pertinent cyber sources may be used to create a data-driven security model to help us reach our objective. In the field of cybersecurity, numerous datasets are utilized for various tasks, such as intrusion analysis, virus analysis, anomaly analysis, fraud analysis, or spam analysis.

We emphasize their use based on machine learning techniques in diverse cyber applications and review several such datasets, including their various properties and attacks, that are available online. A multi-layered architecture for smart cybersecurity services, which is briefly presented, discusses how to analyze effectively and process these security features, develop a target machine learning-based security model following the criteria, and eventually use data-driven decision-making.

Research Issues And Future Directions

Cybersecurity datasets: The source dataset is the main tool for data scientists working in this field. The vast majority of the datasets now in use are largely outdated and may not be sufficient to comprehend the most recent behavioral patterns of different cyberattacks.

Handling cybersecurity dataset quality issues: Cybersecurity datasets may be cluttered, lacking, inconsequential, unbalanced, or contain inconsistent data points relating to a specific security incident.

Security policy rule generation: Based on the relevant user or user group, service, or application, a user can authorize, limit, and track network traffic using security policy rules that refer to security zones. During the execution, the policy rules, which include both broad and more specialized rules, are compared sequentially to the incoming traffic, and the rule that matches the traffic is applied.

Conclusion

We have examined how cybersecurity data science applies to data-driven intelligent decision-making in smart cybersecurity systems and services in this study, which was motivated by the growing significance of cybersecurity, data science, and machine learning technologies. In terms of deriving knowledge from security incidents and the dataset itself, we have also talked about how it may affect security data.

Data Science data science course data science course in Hyderabad best data science course

Disclaimer

That the contents of third-party articles/blogs published here on the website, and the interpretation of all information in the article/blogs such as data, maps, numbers, opinions etc. displayed in the article/blogs and views or the opinions expressed within the content are solely of the author's; and do not reflect the opinions and beliefs of NASSCOM or its affiliates in any manner. NASSCOM does not take any liability w.r.t. content in any manner and will not be liable in any manner whatsoever for any kind of liability arising out of any act, error or omission. The contents of third-party article/blogs published, are provided solely as convenience; and the presence of these articles/blogs should not, under any circumstances, be considered as an endorsement of the contents by NASSCOM in any manner; and if you chose to access these articles/blogs , you do so at your own risk.

rajeshwari