title
  

Intrusion detection over encrypted network data

Karaçay, Leyli and Savaş, Erkay and Alptekin, Halit (2020) Intrusion detection over encrypted network data. Computer Journal, 63 (4). pp. 604-619. ISSN 0010-4620 (Print) 1460-2067 (Online)

[img]PDF - Registered users only - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
676Kb

Official URL: http://dx.doi.org/10.1093/comjnl/bxz111

Abstract

Effective protection against cyber-attacks requires constant monitoring and analysis of system data in an IT infrastructure, such as log files and network packets, which may contain private and sensitive information. Security operation centers (SOC), which are established to detect, analyze and respond to cyber-security incidents, often utilize detection models either for known types of attacks or for anomaly and applies them to the system data for detection. SOC are also motivated to keep their models private to capitalize on the models that are their propriety expertise, and to protect their detection strategies against adversarial machine learning. In this paper, we develop a protocol for privately evaluating detection models on the system data, in which privacy of both the system data and detection models is protected and information leakage is either prevented altogether or quantifiably decreased. Our main approach is to provide an end-to-end encryption for the system data and detection models utilizing lattice-based cryptography that allows homomorphic operations over ciphertext. We employ recent data sets in our experiments which demonstrate that the proposed privacy-preserving intrusion detection system is feasible in terms of execution times and bandwidth requirements and reliable in terms of accuracy.

Item Type:Article
Uncontrolled Keywords:cyber security; intrusion detection systems; lattice-based homomorphic encryption; machine learning; binary decision tree; privacy-preserving data classification
Subjects:Q Science > QA Mathematics > QA075 Electronic computers. Computer science
ID Code:40595
Deposited By:Erkay Savaş
Deposited On:22 Sep 2020 15:29
Last Modified:22 Sep 2020 15:29

Repository Staff Only: item control page