Cyber Security Threat Prediction using Time-Series Data With LSTM Algorithms
Abstract
Cyber security remains a paramount concern in the digital era, with organizations and individuals increasingly vulnerable to sophisticated cyber-attacks. This study aims to develop and evaluate Long Short-Term Memory (LSTM) regression models to predict three types of cyber attacks: flood, spyware, and vulnerability. The LSTM algorithm is used to construct regression models for spyware, flood, and vulnerabilities within a firewall log dataset. The experiments demonstrate that preprocessing techniques such as normalization and standardization can positively impact model performance by reducing prediction errors and enhancing accuracy. The results of the experiments show that the model developed in this research exhibits potential in predicting cyber attacks. For the flood attack model, the best performance was achieved with an RMSE of 59.8810 and an R-Squared of 0.9214 after data standardization. The spyware attack model's best results were an RMSE of 133.9567 and an R-Squared of 0.7685 after standardization. In contrast, the vulnerability attack model showed limited improvement, with the best RMSE of 503.5521 and an R-Squared of 0.2358 after standardization. Moreover, real-time implementation and testing of these models in live network environments could validate their practical applicability and effectiveness.
Keywords
References
Badan Siber dan Sandi Negara, “Lanskap Keamanan Siber Indonesia 2022,” Badan Siber dan Sandi Negara, pp. 1–97, 2022.
T. Stevens, “Global cybersecurity: New directions in theory and methods,” Politics and Governance, vol. 6, no. 2. Cogitatio Press, pp. 1–4, 2018. doi: 10.17645/pag.v6i2.1569.
T. Vimy et al., “ANCAMAN SERANGAN SIBER PADA KEAMANAN NASIONAL INDONESIA,” J. Kewarganegaraan, vol. 6, no. 1, 2022.
L. Daria, Z. Dmitry, and Y. Anastasiia, “Predicting cyber attacks on industrial systems using the Kalman filter,” Proc. 3rd World Conf. Smart Trends Syst. Secur. Sustain. WorldS4 2019, pp. 317–321, 2019, doi: 10.1109/WorldS4.2019.8904038.
J. F. Torres, D. Hadjout, A. Sebaa, F. Martínez-Álvarez, and A. Troncoso, “Deep Learning for Time Series Forecasting: A Survey,” Big Data, vol. 9, no. 1. Mary Ann Liebert Inc., pp. 3–21, Feb. 01, 2021. doi: 10.1089/big.2020.0159.
Burkov, “The hundred pages machine learining book,” p. 433, 2019.
Y. Bengio, I. Goodfellow, and A. Courville, “Deep Learning,” 2015.
M. H. Alsharif, M. K. Younes, and J. Kim, “Time series ARIMA model for prediction of daily and monthly average global solar radiation: The case study of Seoul, South Korea,” Symmetry (Basel)., vol. 11, no. 2, Feb. 2019, doi: 10.3390/sym11020240.
S. Siami-Namini, N. Tavakoli, and A. Siami Namin, “A Comparison of ARIMA and LSTM in Forecasting Time Series,” in Proceedings - 17th IEEE International Conference on Machine Learning and Applications, ICMLA 2018, Institute of Electrical and Electronics Engineers Inc., Jul. 2018, pp. 1394–1401. doi: 10.1109/ICMLA.2018.00227.
G. Werner, S. Yang, and K. McConky, “Time series forecasting of cyber attack intensity,” in ACM International Conference Proceeding Series, Association for Computing Machinery, Apr. 2017. doi: 10.1145/3064814.3064831.
W. G. Mueller, A. Memory, and K. Bartrem, “Forecasting Network Intrusions from Security Logs Using LSTMs,” in Communications in Computer and Information Science, Springer Science and Business Media Deutschland GmbH, 2020, pp. 122–137. doi: 10.1007/978-3-030-59621-7_7.
C. Chen, J. Twycross, and J. M. Garibaldi, “A new accuracy measure based on bounded relative error for time series forecasting,” PLoS One, vol. 12, no. 3, pp. 1–23, 2017, doi: 10.1371/journal.pone.0174202.
Refbacks
- There are currently no refbacks.
Indonesian Journal of Electrical Engineering and Informatics (IJEEI)
ISSN 2089-3272
This work is licensed under a Creative Commons Attribution 4.0 International License.