How to divide a network to security segments based on the network behavior?
Protecting a computer network is a cat-and-mouse game with the attackers. The attacks are getting more sophisticated, targeted, and more challenging to defend against. The spending on the protection of the network increases year by year.
In this situation, we investigate how to apply modern techniques to the traditional network security measures to automate network defense, improve network security, and reduce the network protection costs. We use machine learning approaches in combination with the observation of host behavior in a network to provide a novel and automated approach to network defense.
We inspect the possibilities of the behavior-aware network segmentation using IP flows and machine learning approaches that would identify segments automatically, even in a complex network. Namely, we
For this publication, we received the best paper award runner-up at the 14th International Conference on Availability, Reliability and Security (ARES 2019). This conference brings together researchers and practitioners in the area of dependability since 2006. The conference highlights various aspects of security – with special focus on the crucial linkage between availability, reliability and security.
In the C4e project, we are building upon these results to research more effective methods for network defense, traffic monitoring, and host behavior modeling. If you are interested in cybersecurity, follow us on our website: https://c4e.cz/.
SMERIGA, Juraj and Tomáš JIRSÍK. Behavior-Aware Network Segmentation using IP Flows. In Proceedings of the 14th International Conference on Availability, Reliability and Security. New York, NY, USA: ACM, 2019. p. 1-9, ISBN 978-1-4503-7164-3. doi: http://dx.doi.org/10.1145/3339252.3339265
We enhance a definition of metric space, which is the most often used generic model of the pairwise similarity of complex objects, such as multimedia. The novel definition includes a small amount of information about the addressed data and allows to improve many contemporary techniques for efficient data processing.
We would like to invite you to International symposium on compliant cyber–defence organized by Institute of Law and Technology, Faculty of Law, Masaryk University and Cybersecurity, Cybercrime and Critical Information Infrastructures Centre of Excellence.