AI-Driven Cyber Defense Systems Using Real-Time Analytics

  • Authors

    • Dr. Chinedu Eze Department of Electrical Engineering, Enugu Technical University, Nigeria. Author

    DOI:

    https://doi.org/10.67228/30713498/IJADSMC-2021PII5L7Z

    Published 07-04-2021

  • Artificial Intelligence, Cyber Defense, Real-Time Analytics, Machine Learning, Intrusion Detection Systems, Cybersecurity

    Issue

    Section

    Articles

    How to Cite

    [1]
    C. Eze, “AI-Driven Cyber Defense Systems Using Real-Time Analytics”, IJADSMC, vol. 4, no. 2, pp. 01–16, Jul. 2021, doi: 10.67228/30713498/IJADSMC-2021PII5L7Z.
  • Abstract

    The rapid digitization of critical infrastructure, businesses, and government services has expanded the cyber-attack surface, making traditional security mechanisms increasingly ineffective. AI-based cyber defense systems powered by real-time analytics provide a proactive and adaptive approach to cybersecurity by integrating machine learning, deep learning, and intelligent threat detection techniques. This study examines the architecture, analytical frameworks, and operational processes of AI-driven cyber defense solutions capable of detecting known and unknown threats, including zero-day attacks and advanced persistent threats (APTs). The proposed framework incorporates continuous monitoring, streaming analytics, anomaly detection, behavioral analysis, and automated response mechanisms. Performance is evaluated using metrics such as detection accuracy, false positive rate, response time, and scalability. The findings indicate that AI-powered cyber defense significantly enhances threat detection, reduces response time, and improves overall cyber resilience compared to traditional security models, highlighting its critical role in next-generation cybersecurity infrastructures.

  • References

    [1] D. E. Denning, “An intrusion-detection model,” IEEE Transactions on Software Engineering, vol. SE-13, no. 2, pp. 222–232, 1987.

    [2] S. Axelsson, “Intrusion detection systems: A survey and taxonomy,” Technical Report, Chalmers University of Technology, 2000.

    [3] R. Sommer and V. Paxson, “Outside the closed world: On using machine learning for network intrusion detection,” IEEE Symposium on Security and Privacy, pp. 305–316, 2010.

    [4] C. Kreibich and J. Crowcroft, “Honeycomb: Creating intrusion detection signatures using honeypots,” ACM SIGCOMM Computer Communication Review, vol. 34, no. 1, pp. 51–56, 2004.

    [5] T. Mitchell, Machine Learning, McGraw-Hill, New York, USA, 1997.

    [6] W. Lee and S. J. Stolfo, “A framework for constructing features and models for intrusion detection systems,” ACM Transactions on Information and System Security, vol. 3, no. 4, pp. 227–261, 2000.

    [7] A. L. Buczak and E. Guven, “A survey of data mining and machine learning methods for cyber security intrusion detection,” IEEE Communications Surveys & Tutorials, vol. 18, no. 2, pp. 1153–1176, 2016.

    [8] Y. Bengio, I. Goodfellow, and A. Courville, Deep Learning, MIT Press, Cambridge, MA, 2016.

    [9] Y. Kim, “Convolutional neural networks for sentence classification,” Proceedings of EMNLP, pp. 1746–1751, 2014.

    [10] J. Hochreiter and S. Schmidhuber, “Long short-term memory,” Neural Computation, vol. 9, no. 8, pp. 1735–1780, 1997.

    [11] N. Moustafa and J. Slay, “UNSW-NB15: A comprehensive data set for network intrusion detection systems,” Military Communications and Information Systems Conference, pp. 1–6, 2015.

    [12] M. Ring et al., “A survey of network-based intrusion detection data sets,” Computers & Security, vol. 86, pp. 147–167, 2019.

    [13] A. Shabtai, U. Kanonov, Y. Elovici, C. Glezer, and Y. Weiss, “Andromaly: A behavioral malware detection framework for Android devices,” Journal of Intelligent Information Systems, vol. 38, no. 1, pp. 161–190, 2012.

    [14] T. Akidau et al., “The dataflow model: A practical approach to balancing correctness, latency, and cost in massive-scale, unbounded, out-of-order data processing,” Proceedings of the VLDB Endowment, vol. 8, no. 12, pp. 1792–1803, 2015.

    [15] H. Hindy et al., “A taxonomy of network threats and the effect of current datasets on intrusion detection systems,” IEEE Access, vol. 8, pp. 104650–104675, 2020.

  • Downloads