A Cloud Computing Based Network Monitoring and Threat Detection System for Critical Infrastructures

详细信息    查看全文

• 作者：Zhijiang Chen ; Guobin Xu ; Vivek Mahalingam ; Linqiang Ge ; James Nguyen ; Wei Yu ; ^{wyu@towson.edu" class="auth_mail" title="E-mail the corresponding author} ; Chao Lu
• 关键词：Network monitoring ; Threat detection ; Cloud computing
• 刊名：Big Data Research
• 出版年：2016
• 出版时间：April 2016
• 年：2016
• 卷：3
• 期：Complete
• 页码：10-23
• 全文大小：2986 K

文摘

Critical infrastructure systems perform functions and missions that are essential for our national economy, health, and security. These functions are vital to commerce, government, and society and are closely interrelated with people's lives. To provide highly secured critical infrastructure systems, a scalable, reliable and robust threat monitoring and detection system should be developed to efficiently mitigate cyber threats. In addition, big data from threat monitoring systems pose serious challenges for cyber operations because an ever growing number of devices in the system and the amount of complex monitoring data collected from critical infrastructure systems require scalable methods to capture, store, manage, and process the big data. To address these challenges, in this paper, we propose a cloud computing based network monitoring and threat detection system to make critical infrastructure systems secure. Our proposed system consists of three main components: monitoring agents, cloud infrastructure, and an operation center. To build our proposed system, we use both Hadoop MapReduce and Spark to speed up data processing by separating and processing data streams concurrently. With a real-world data set, we conducted real-world experiments to evaluate the effectiveness of our developed network monitoring and threat detection system in terms of network monitoring, threat detection, and system performance. Our empirical data indicates that the proposed system can efficiently monitor network activities, find abnormal behaviors, and detect network threats to protect critical infrastructure systems.