Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure

Due to polymorphic nature of malware attack, a signature-based analysis is no longer sufficient to solve polymorphic and stealth nature ofmalware attacks. On the other hand, state-of-the-art methods like deep learning require labelled dataset as a target to train a supervised model. This is unlikely...

Full description

Bibliographic Details
Published in:Computers, Materials and Continua
Main Author: Mohd Yusof M.H.; Mohd Zin A.; Mohd Satar N.S.
Format: Article
Language:English
Published: Tech Science Press 2022
Online Access:https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127342461&doi=10.32604%2fcmc.2022.023571&partnerID=40&md5=2e2ba081c6d0bbdf7a8fcc413a93e3cb
id 2-s2.0-85127342461
spelling 2-s2.0-85127342461
Mohd Yusof M.H.; Mohd Zin A.; Mohd Satar N.S.
Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
2022
Computers, Materials and Continua
72
2
10.32604/cmc.2022.023571
https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127342461&doi=10.32604%2fcmc.2022.023571&partnerID=40&md5=2e2ba081c6d0bbdf7a8fcc413a93e3cb
Due to polymorphic nature of malware attack, a signature-based analysis is no longer sufficient to solve polymorphic and stealth nature ofmalware attacks. On the other hand, state-of-the-art methods like deep learning require labelled dataset as a target to train a supervised model. This is unlikely to be the case in production network as the dataset is unstructured and has no label. Hence an unsupervised learning is recommended. Behavioral study is one of the techniques to elicit traffic pattern. However, studies have shown that existing behavioral intrusion detection model had a few issues which had been parameterized into its common characteristics, namely lack of prior information (p (θ)), and reduced parameters (θ). Therefore, this study aims to utilize the previously built Feature Selection Model subsequently to design a Predictive Analytics Model based on Bayesian Network used to improve the analysis prediction. Feature Selection Model is used to learn significant label as a target and Bayesian Network is a sophisticated probabilistic approach to predict intrusion. Finally, the results are extended to evaluate detection, accuracy and false alarm rate of the model against the subject matter expert model, Support Vector Machine (SVM), k nearest neighbor (k-NN) using simulated and ground-truth dataset. The ground-truth dataset from the production traffic of one of the largest healthcare provider in Malaysia is used to promote realism on the real use case scenario. Results have shown that the proposed model consistently outperformed other models. © 2022 Tech Science Press. All rights reserved.
Tech Science Press
15462218
English
Article
All Open Access; Gold Open Access
author Mohd Yusof M.H.; Mohd Zin A.; Mohd Satar N.S.
spellingShingle Mohd Yusof M.H.; Mohd Zin A.; Mohd Satar N.S.
Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
author_facet Mohd Yusof M.H.; Mohd Zin A.; Mohd Satar N.S.
author_sort Mohd Yusof M.H.; Mohd Zin A.; Mohd Satar N.S.
title Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
title_short Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
title_full Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
title_fullStr Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
title_full_unstemmed Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
title_sort Behavioral Intrusion Prediction Model on Bayesian Network over Healthcare Infrastructure
publishDate 2022
container_title Computers, Materials and Continua
container_volume 72
container_issue 2
doi_str_mv 10.32604/cmc.2022.023571
url https://www.scopus.com/inward/record.uri?eid=2-s2.0-85127342461&doi=10.32604%2fcmc.2022.023571&partnerID=40&md5=2e2ba081c6d0bbdf7a8fcc413a93e3cb
description Due to polymorphic nature of malware attack, a signature-based analysis is no longer sufficient to solve polymorphic and stealth nature ofmalware attacks. On the other hand, state-of-the-art methods like deep learning require labelled dataset as a target to train a supervised model. This is unlikely to be the case in production network as the dataset is unstructured and has no label. Hence an unsupervised learning is recommended. Behavioral study is one of the techniques to elicit traffic pattern. However, studies have shown that existing behavioral intrusion detection model had a few issues which had been parameterized into its common characteristics, namely lack of prior information (p (θ)), and reduced parameters (θ). Therefore, this study aims to utilize the previously built Feature Selection Model subsequently to design a Predictive Analytics Model based on Bayesian Network used to improve the analysis prediction. Feature Selection Model is used to learn significant label as a target and Bayesian Network is a sophisticated probabilistic approach to predict intrusion. Finally, the results are extended to evaluate detection, accuracy and false alarm rate of the model against the subject matter expert model, Support Vector Machine (SVM), k nearest neighbor (k-NN) using simulated and ground-truth dataset. The ground-truth dataset from the production traffic of one of the largest healthcare provider in Malaysia is used to promote realism on the real use case scenario. Results have shown that the proposed model consistently outperformed other models. © 2022 Tech Science Press. All rights reserved.
publisher Tech Science Press
issn 15462218
language English
format Article
accesstype All Open Access; Gold Open Access
record_format scopus
collection Scopus
_version_ 1809678158568357888