| Title | QuickAdapt: Scalable Adaptation for Big Data Cyber Security Analytics |
| Publication Type | Conference Paper |
| Year of Publication | 2019 |
| Authors | Ullah, Faheem, Ali Babar, M. |
| Conference Name | 2019 24th International Conference on Engineering of Complex Computer Systems (ICECCS) |
| Keywords | Accuracy, adaptation, BDCA system, Big Data, Big Data Cyber Security Analytics, Computer architecture, Computer crime, cyber security, cyber-attacks, Data analysis, descriptive statistics, distributed BDCA system, feature extraction, fuzzy rules, fuzzy set theory, pubcrawl, quality of service, QuickAdapt, Scalability, Scalable Security, security events data, security of data, Statistics, Time factors |
| Abstract | Big Data Cyber Security Analytics (BDCA) leverages big data technologies for collecting, storing, and analyzing a large volume of security events data to detect cyber-attacks. Accuracy and response time, being the most important quality concerns for BDCA, are impacted by changes in security events data. Whilst it is promising to adapt a BDCA system's architecture to the changes in security events data for optimizing accuracy and response time, it is important to consider large search space of architectural configurations. Searching a large space of configurations for potential adaptation incurs an overwhelming adaptation time, which may cancel the benefits of adaptation. We present an adaptation approach, QuickAdapt, to enable quick adaptation of a BDCA system. QuickAdapt uses descriptive statistics (e.g., mean and variance) of security events data and fuzzy rules to (re) compose a system with a set of components to ensure optimal accuracy and response time. We have evaluated QuickAdapt for a distributed BDCA system using four datasets. Our evaluation shows that on average QuickAdapt reduces adaptation time by 105x with a competitive adaptation accuracy of 70% as compared to an existing solution. |
| DOI | 10.1109/ICECCS.2019.00016 |
| Citation Key | ullah_quickadapt_2019 |
QuickAdapt: Scalable Adaptation for Big Data Cyber Security Analytics