ABSTRACT

This chapter focuses on applying data mining for cyber security and discusses the data mining for cyber security applications. It explores the threats to computers and networks and describes the applications of data mining to detect such threats and attacks. Data mining has many applications in security including in national security as well as in cyber security. Data mining techniques have been applied to detect the various attacks. Data mining is being applied for problems such as intrusion and malware detection and auditing. Data mining can also be used for analyzing web logs as well as the audit trails. While data mining can be used to detect and possibly prevent cyber attacks, data mining also exacerbates some security problems such as the inference and privacy problems. Data mining for national security as well as for cyber security is a very active research area.