applying big data analytics in network security
TRANSCRIPT
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Big Data Analysis Applied to Network Security
Email [email protected] for more
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Crisis & Big Data Analytics
Descriptive –What happened?
Predictive-What might happen?
Prescriptive-What actions to take?
Intelligent Driven Security
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
1st Benefit using Descriptive Analytics: Faster Forensics
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Traditional Monitoring was useless…
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
…Big Data Query delivered forensic results in 15 seconds.
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
2nd Benefit of Descriptive Analytics: Shorten Breach Detection Time
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Case1: Tree Maps Using Volume of Activity
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Results show Unauthorized App
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
CPU Drops after client disables this.
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Case 2: Data Visualization Using Fumbling Data
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Case 3: Data Visualization Using Port Number and Packet Size
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Data Visualization using Bar Chart of Internal Traffic Distribution by IP
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Case 4: Descriptive Analytics Using #Sessions
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Case 5: Predictive Analytics using Machine Learning Labeled Training set (Bad/Not Bad) Perform Supervised Machine Learning Create Model to predict ‘Bad’ Ips Confirm Model on Validation Data set Put predicted ‘Bad’ IPs in
‘Watch List’ or ‘Hot’ Lists (PRESCRIPTIVE)
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Predictive Analytics Model Creation
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Results on Validation Set
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Tools & Resources
Copyright 2014. All Rights Reserved BitStop Network Services Inc. Website: www.bnshosting.net
Additional Links: http://tabsoft.co/2bKiXpo www.bnshosting.net https://www.facebook.com/bnshosting/ https://www.facebook.com/groups/PHInternet/ https://www.facebook.com/groups/108560036239757
/