Zero-Day Attack Identification in Streaming Data Using Semantics and Spark
MetadataShow full item record
Type of Work8 pages
Citation of Original PublicationS. C. Pallaprolu, R. Sankineni, M. Thevar, G. Karabatis and J. Wang, "Zero-Day Attack Identification in Streaming Data Using Semantics and Spark," 2017 IEEE International Congress on Big Data (BigData Congress), Honolulu, HI, 2017, pp. 121-128.
RightsThis item may be protected under Title 17 of the U.S. Copyright Law. It is made available by UMBC for non-commercial research and education. For permission to publish or reproduce, please contact the author.
Intrusion Detection Systems (IDS) have been in existence for many years now, but they fall short in efficiently detecting zero-day attacks. This paper presents an organic combination of Semantic Link Networks (SLN) and dynamic semantic graph generation for the on the fly discovery of zero-day attacks using the Spark Streaming platform for parallel detection. In addition, a minimum redundancy maximum relevance (MRMR) feature selection algorithm is deployed to determine the most discriminating features of the dataset. Compared to previous studies on zero-day attack identification, the described method yields better results due to the semantic learning and reasoning on top of the training data and due to the use of collaborative classification methods. We also verified the scalability of our method in a distributed environment.