ABSTRACT

Big-data based cybersecurity analytics is a data-centric approach. Its ultimate goal is to utilize available technology solutions to make sense of the wealth of relevant cyber data and turn it into actionable insights that can be used to improve the current practices of network operators and administrators. The datasets can be categorized by where they are collected from, which layer they are collected from, or how they are collected. An operating system (OS) is a system software that manages computer hardware and software resources and provides common services for computer programs. All computer programs require an operating system to function. Data from network traffic can be used to detect network-based attack, spread of malicious programs, as well as network management. Applications such as browsers, document processing software, e-mail, and computer games as well as services such as web servers and databases, use and create data.