Cyberattack Detection Framework Using Machine Learning and User Behavior Analytics

This paper proposes a novel framework to detect cyber-attacks using Machine Learning coupled with User Behavior Analytics.The framework models the user behavior as sequences of events representing the user activities at such a network.The represented sequences are thenfitted into a recurrent neural network model to extract features that draw distinctive behavior for individual users.Thus,the model can recognize frequencies of regular behavior to profile the user manner in the network.The subsequent procedure is that the recurrent neural network would detect abnormal behavior by classifying unknown behavior to either regu-lar or irregular behavior.The importance of the proposed framework is due to the increase of cyber-attacks especially when the attack is triggered from such sources inside the network.Typically detecting inside attacks are much more challenging in that the security protocols can barely recognize attacks from trustful resources at the network,including users.Therefore,the user behavior can be extracted and ultimately learned to recognize insightful patterns in which the regular patterns reflect a normal network workflow.In contrast,the irregular patterns can trigger an alert for a potential cyber-attack.The framework has been fully described where the evaluation metrics have also been introduced.The experimental results show that the approach performed better compared to other approaches and AUC 0.97 was achieved using RNN-LSTM 1.The paper has been concluded with pro-viding the potential directions for future improvements.

Sales Prediction and Product Recommendation Model Through User Behavior Analytics

The COVID-19 has brought us unprecedented difficulties and thousands of companies have closed down.The general public has responded to call of the government to stay at home.Offline retail stores have been severely affected.Therefore,in order to transform a traditional offline sales model to the B2C model and to improve the shopping experience,this study aims to utilize historical sales data for exploring,building sales prediction and recommendation models.A novel data science life-cycle and process model with Recency,Frequency,and Monetary(RFM)analysis method with the combination of various analytics algorithms are utilized in this study for sales prediction and product recommendation through user behavior analytics.RFM analysis method is utilized for segmenting customer levels in the company to identify the importance of each level.For the purchase prediction model,XGBoost and Random Forest machine learning algorithms are used to build prediction models and 5-fold Cross-Validation method is utilized to evaluate their.For the product recommendation model,the association rules theory and Apriori algorithm are used to complete basket analysis and recommend products according to the outcomes.Moreover,some suggestions are proposed for the marketing department according to the outcomes.Overall,the XGBoost model achieved better performance and better accuracy with F1-score around 0.789.The proposed recommendation model provides good recommendation results and sales combinations for improving sales and market responsiveness.Furthermore,it recommend specific products to new customers.This study offered a very practical and useful business transformation case that assists companies in similar situations to transform their business models.

User Behavior Traffic Analysis Using a Simplified Memory-Prediction Framework

As nearly half of the incidents in enterprise security have been triggered by insiders,it is important to deploy a more intelligent defense system to assist enterprises in pinpointing and resolving the incidents caused by insiders or malicious software(malware)in real-time.Failing to do so may cause a serious loss of reputation as well as business.At the same time,modern network traffic has dynamic patterns,high complexity,and large volumes that make it more difficult to detect malware early.The ability to learn tasks sequentially is crucial to the development of artificial intelligence.Existing neurogenetic computation models with deep-learning techniques are able to detect complex patterns;however,the models have limitations,including catastrophic forgetfulness,and require intensive computational resources.As defense systems using deep-learning models require more time to learn new traffic patterns,they cannot perform fully online(on-the-fly)learning.Hence,an intelligent attack/malware detection system with on-the-fly learning capability is required.For this paper,a memory-prediction framework was adopted,and a simplified single cell assembled sequential hierarchical memory(s.SCASHM)model instead of the hierarchical temporal memory(HTM)model is proposed to speed up learning convergence to achieve onthe-fly learning.The s.SCASHM consists of a Single Neuronal Cell(SNC)model and a simplified Sequential Hierarchical Superset(SHS)platform.The s.SCASHMis implemented as the prediction engine of a user behavior analysis tool to detect insider attacks/anomalies.The experimental results show that the proposed memory model can predict users’traffic behavior with accuracy level ranging from 72%to 83%while performing on-the-fly learning.