Detection of advanced persistent threats using hashing and graph-based learning on streaming data - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Applied Intelligence Année : 2024

Detection of advanced persistent threats using hashing and graph-based learning on streaming data

Walid Megherbi
Mohammed Haddad
Hamida Seba

Résumé

Many activities in the cybersecurity realm can be represented using graphs stream, such as call graphs. In this paper, we introduce an innovative method to detect Advanced Persistent Threats (APTs) from their onset. Unique to our approach is the ability to assimilate both structural and temporal aspects, crucial for differentiating between benign and malicious activities. To overcome challenges presented by streaming data processing, we leverage hashing techniques for a compact data representation. This method, when combined with a dynamic machine learning framework, facilitates swift, incremental detection and ensures minimal memory usage. Empirical evaluations underscore the efficacy of our approach, allowing a real-time response by pinpointing APTs at the initial stages of their activity.
Fichier non déposé

Dates et versions

hal-04588294 , version 1 (26-05-2024)

Identifiants

Citer

Walid Megherbi, Abd Errahmane Kiouche, Mohammed Haddad, Hamida Seba. Detection of advanced persistent threats using hashing and graph-based learning on streaming data. Applied Intelligence, 2024, 54 (7), pp.5879-5890. ⟨10.1007/S10489-024-05475-1⟩. ⟨hal-04588294⟩
34 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More