Book Image

Hands-On Machine Learning for Cybersecurity

By : Soma Halder, Sinan Ozdemir
Book Image

Hands-On Machine Learning for Cybersecurity

By: Soma Halder, Sinan Ozdemir

Overview of this book

Cyber threats today are one of the costliest losses that an organization can face. In this book, we use the most efficient tool to solve the big problems that exist in the cybersecurity domain. The book begins by giving you the basics of ML in cybersecurity using Python and its libraries. You will explore various ML domains (such as time series analysis and ensemble modeling) to get your foundations right. You will implement various examples such as building system to identify malicious URLs, and building a program to detect fraudulent emails and spam. Later, you will learn how to make effective use of K-means algorithm to develop a solution to detect and alert you to any malicious activity in the network. Also learn how to implement biometrics and fingerprint to validate whether the user is a legitimate user or not. Finally, you will see how we change the game with TensorFlow and learn how deep learning is effective for creating models and training systems

Related Content you might be interested in

Current Title:

Small book image
Hands-On Machine Learning for Cybersecurity
Soma Halder | Sinan Ozdemir
Dec, 2018 | 318 pages
Small book image
Mastering Machine Learning for Penetration Testing
Chiheb Chebbi
Jun, 2018 | 276 pages
Small book image
Machine Learning for Cybersecurity Cookbook
Emmanuel Tsukerman
Nov, 2019 | 346 pages
Small book image
Hands-On Artificial Intelligence for Cybersecurity
Alessandro Parisi
Aug, 2019 | 342 pages
Table of Contents (13 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Get in touch
Free Chapter
1
Basics of Machine Learning in Cybersecurity
Basics of Machine Learning in Cybersecurity
What is machine learning?
Summary
2
Time Series Analysis and Ensemble Modeling
Time Series Analysis and Ensemble Modeling
What is a time series?
Classes of time series models
Time series decomposition
Use cases for time series
Time series analysis in cybersecurity
Time series trends and seasonal spikes
Predicting DDoS attacks
Ensemble learning methods
Voting ensemble method to detect cyber attacks
Summary
3
Segregating Legitimate and Lousy URLs
Segregating Legitimate and Lousy URLs
Introduction to the types of abnormalities in URLs
Using heuristics to detect malicious pages
Using machine learning to detect malicious URLs
Logistic regression to detect malicious URLs
SVM to detect malicious URLs
Multiclass classification for URL classification
Summary
4
Knocking Down CAPTCHAs
Knocking Down CAPTCHAs
Characteristics of CAPTCHA
Using artificial intelligence to crack CAPTCHA
Summary
5
Using Data Science to Catch Email Fraud and Spam
Using Data Science to Catch Email Fraud and Spam
Email spoofing
Spam detection
Summary
6
Efficient Network Anomaly Detection Using k-means
Efficient Network Anomaly Detection Using k-means
Stages of a network attack
Dealing with lateral movement in networks
Using Windows event logs to detect network anomalies
Ingesting active directory data
Data parsing
Modeling
Detecting anomalies in a network with k-means
Summary
7
Decision Tree and Context-Based Malicious Event Detection
Decision Tree and Context-Based Malicious Event Detection
Adware
Bots
Bugs
Ransomware
Rootkit
Spyware
Trojan horses
Viruses
Worms
Malicious data injection within databases
Malicious injections in wireless sensors
Use case
Revisiting malicious URL detection with decision trees
Summary
8
Catching Impersonators and Hackers Red Handed
Catching Impersonators and Hackers Red Handed
Understanding impersonation
Different types of impersonation fraud
Levenshtein distance
Summary
9
Changing the Game with TensorFlow
Changing the Game with TensorFlow
Introduction to TensorFlow
Installation of TensorFlow
TensorFlow for Windows users
Hello world in TensorFlow
Importing the MNIST dataset
Computation graphs
Tensor processing unit
Using TensorFlow for intrusion detection
Summary
10
Financial Fraud and How Deep Learning Can Mitigate It
Financial Fraud and How Deep Learning Can Mitigate It
Machine learning to detect financial fraud
Logistic regression classifier – under-sampled data
Deep learning time
Summary
11
Case Studies
Case Studies
Introduction to our password dataset
Summary
12
Other Books You May Enjoy
Other Books You May Enjoy
Leave a review - let other readers know what you think

Data parsing

We need to transform data in a format that is easily and readily readable by the feature generator. The columns that we generate comprise the following:

  • startTimeISO
  • Type of Windows event
  • Destination name or IP
  • Destination SecurityID
  • Destination username
  • Source log on type
  • Source name or IP
  • Destination NtDomain
  • Destination service security ID
  • Destination service name
  • Source username
  • Privileges
  • Source host name
  • Destination port
  • AD profile path
  • AD script path
  • AD user workstation
  • Source log on ID
  • Source security ID
  • Source NtDomain
Previous Section
End of Section 6
Next Section