Please use this identifier to cite or link to this item: https://hdl.handle.net/10216/134763
Full metadata record
DC FieldValueLanguage
dc.creatorTiago Miguel Pereira Ribeiro
dc.date.accessioned2025-11-10T11:08:27Z-
dc.date.available2025-11-10T11:08:27Z-
dc.date.issued2021-07-13
dc.date.submitted2021-07-21
dc.identifier.othersigarra:482343
dc.identifier.urihttps://hdl.handle.net/10216/134763-
dc.descriptionMachine Learning (ML) is seeing growing usage on Network Intrusion Detection Systems (NIDS) and allowing for an early detection of novel attacks, a prime example of how this technology may be applied to the field of cybersecurity. However, computational requirements associated with ML might make it difficult to process traffic in real time, particularly when dealing with a large volume of data or a high throughput connection, undermining the NIDS' usefulness or its detection capabilities. The goal of this dissertation is to implement an IDS capable of detecting malware command and control traffic over TLS. This system will include: 1) a baseline component which detects and discards blacklisted TLS certificates, 2) a ML component that classifies traffic flows based on a previously created model, and 3) an information storing component allowing for the ML model to be retrained as the TLS certificates' blacklist is updated. The online performance of this detection system will be evaluated against a high traffic volume, with conclusions contributing to Machine Learning-enabled network intrusion detection.
dc.language.isoeng
dc.rightsopenAccess
dc.subjectEngenharia electrotécnica, electrónica e informática
dc.subjectElectrical engineering, Electronic engineering, Information engineering
dc.titleOnline Machine Learning-enabled Network Intrusion Detection
dc.typeDissertação
dc.contributor.uportoFaculdade de Engenharia
dc.identifier.doi10.34626/njh5-yn72
dc.identifier.tid202827879
dc.subject.fosCiências da engenharia e tecnologias::Engenharia electrotécnica, electrónica e informática
dc.subject.fosEngineering and technology::Electrical engineering, Electronic engineering, Information engineering
thesis.degree.disciplineMestrado Integrado em Engenharia Electrotécnica e de Computadores
thesis.degree.grantorFaculdade de Engenharia
thesis.degree.grantorUniversidade do Porto
thesis.degree.level1
Appears in Collections:FEUP - Dissertação

Files in This Item:
File Description SizeFormat 
482343.pdfOnline Machine Learning-enabled Network Intrusion Detection6.35 MBAdobe PDFThumbnail
View/Open


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.