Compartir
Título
Towards Supercomputing Categorizing the Maliciousness upon Cybersecurity Blacklists with Concept Drift
Autor
Facultad/Centro
Área de conocimiento
Título de la revista
Computational and Mathematical Methods
Cita Bibliográfica
Carriegos, DeCastro-García, & Escudero. (2023). Towards Supercomputing Categorizing the Maliciousness upon Cybersecurity Blacklists with Concept Drift. Computational and Mathematical Methods, 2023. https://doi.org/10.1155/2023/5780357
Editorial
Hindawi
Fecha
2023-05-20
Resumen
[EN] In this article, we have carried out a case study to optimize the classification of the maliciousness of cybersecurity events by IP addresses using machine learning techniques. The optimization is studied focusing on time complexity. Firstly, we have used the extreme gradient boosting model, and secondly, we have parallelized the machine learning algorithm to study the effect of using a different number of cores for the problem. We have classified the cybersecurity events' maliciousness in a biclass and a multiclass scenario. All the experiments have been carried out with a well-known optimal set of features: the geolocation information of the IP address. However, the geolocation features of an IP address can change over time. Also, the relation between the IP address and its label of maliciousness can be modified if we test the address several times. Then, the models' performance could degrade because the information acquired from training on past samples may not generalize well to new samples. This situation is known as concept drift. For this reason, it is necessary to study if the optimization proposed works in a concept drift scenario. The results show that the concept drift does not degrade the models. Also, boosting algorithms achieving competitive or better performance compared to similar research works for the biclass scenario and an effective categorization for the multiclass case. The best efficient setting is reached using five nodes regarding high-performance computation resources.
Materia
Palabras clave
Peer review
SI
URI
DOI
Versión del editor
Aparece en las colecciones
- Artículos [5065]
Ficheros en el ítem
Tamaño:
739.3
xmlui.dri2xhtml.METS-1.0.size-kilobytes
Formato:
Adobe PDF
Descripción:
Versión publicada