Real time cyber attack analysis on Hadoop ecosystem using machine learning algorithms


Autoria(s): Khorshed, Md Tanzim; Sharma, Neeraj A.; Dutt, Aaron V.; Ali, A. B. M. Shawat; Xiang, Yang
Contribuinte(s)

[Unknown]

Data(s)

01/01/2015

Resumo

Big Data technologies are exciting cutting-edge technologies that generate, collect, store and analyse tremendous amount of data. Like any other IT revolution, Big Data technologies also have big challenges that are obstructing it to be adopted by wider community or perhaps impeding to extract value from Big Data with pace and accuracy it is promising. In this paper we first offer an alternative view of «Big Data Cloud» with the main aim to make this complex technology easy to understand for new researchers and identify gaps efficiently. In our lab experiment, we have successfully implemented cyber-attacks on Apache Hadoop's management interface «Ambari». On our thought about «attackers only need one way in», we have attacked the Apache Hadoop's management interface, successfully turned down all communication between Ambari and Hadoop's ecosystem and collected performance data from Ambari Virtual Machine (VM) and Big Data Cloud hypervisor. We have also detected these cyber-attacks with 94.0187% accurateness using modern machine learning algorithms. From the existing researchs, no one has ever attempted similar experimentation in detection of cyber-attacks on Hadoop using performance data.

Identificador

http://hdl.handle.net/10536/DRO/DU:30084608

Idioma(s)

eng

Publicador

IEEE

Relação

http://dro.deakin.edu.au/eserv/DU:30084608/khorshed-realtimecyber-2015.pdf

http://dro.deakin.edu.au/eserv/DU:30084608/khorshed-realtimecyber-evid1-2015.pdf

http://dro.deakin.edu.au/eserv/DU:30084608/khorshed-realtimecyber-evid2-2015.pdf

http://www.dx.doi.org/10.1109/APWCCSE.2015.7476223

Direitos

2015, IEEE

Palavras-Chave #big data #Hadoop #Ambari #internet of things #classification #machine learning #cloud computing #cyber-attack
Tipo

Conference Paper