Please use this identifier to cite or link to this item:
https://hdl.handle.net/10216/134763Full metadata record
| DC Field | Value | Language |
|---|---|---|
| dc.creator | Tiago Miguel Pereira Ribeiro | |
| dc.date.accessioned | 2025-11-10T11:08:27Z | - |
| dc.date.available | 2025-11-10T11:08:27Z | - |
| dc.date.issued | 2021-07-13 | |
| dc.date.submitted | 2021-07-21 | |
| dc.identifier.other | sigarra:482343 | |
| dc.identifier.uri | https://hdl.handle.net/10216/134763 | - |
| dc.description | Machine Learning (ML) is seeing growing usage on Network Intrusion Detection Systems (NIDS) and allowing for an early detection of novel attacks, a prime example of how this technology may be applied to the field of cybersecurity. However, computational requirements associated with ML might make it difficult to process traffic in real time, particularly when dealing with a large volume of data or a high throughput connection, undermining the NIDS' usefulness or its detection capabilities. The goal of this dissertation is to implement an IDS capable of detecting malware command and control traffic over TLS. This system will include: 1) a baseline component which detects and discards blacklisted TLS certificates, 2) a ML component that classifies traffic flows based on a previously created model, and 3) an information storing component allowing for the ML model to be retrained as the TLS certificates' blacklist is updated. The online performance of this detection system will be evaluated against a high traffic volume, with conclusions contributing to Machine Learning-enabled network intrusion detection. | |
| dc.language.iso | eng | |
| dc.rights | openAccess | |
| dc.subject | Engenharia electrotécnica, electrónica e informática | |
| dc.subject | Electrical engineering, Electronic engineering, Information engineering | |
| dc.title | Online Machine Learning-enabled Network Intrusion Detection | |
| dc.type | Dissertação | |
| dc.contributor.uporto | Faculdade de Engenharia | |
| dc.identifier.doi | 10.34626/njh5-yn72 | |
| dc.identifier.tid | 202827879 | |
| dc.subject.fos | Ciências da engenharia e tecnologias::Engenharia electrotécnica, electrónica e informática | |
| dc.subject.fos | Engineering and technology::Electrical engineering, Electronic engineering, Information engineering | |
| thesis.degree.discipline | Mestrado Integrado em Engenharia Electrotécnica e de Computadores | |
| thesis.degree.grantor | Faculdade de Engenharia | |
| thesis.degree.grantor | Universidade do Porto | |
| thesis.degree.level | 1 | |
| Appears in Collections: | FEUP - Dissertação | |
Files in This Item:
| File | Description | Size | Format | |
|---|---|---|---|---|
| 482343.pdf | Online Machine Learning-enabled Network Intrusion Detection | 6.35 MB | Adobe PDF | ![]() View/Open |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.
