Enhance Security Awareness with Data Mining: Data-driven Intrusion Detection Solutions in Alibaba Cloud
No ratings
Presented at BlueHatShanghai 2019 by
Today, with the breakthroughs achieved by machine learning one after another, more and more companies start to apply machine learning in their various security solutions. However, these works either focus on proposing new algorithms or just discovering new application scenarios. Little has been said about the gap between the academic results with small data volumes and the huge variety of cloud applications. In this talk, we will first show the challenges of cloud security awareness, especially application layer threats. Then several state-of-the-art intrusion detection solutions using data mining techniques will be presented, e.g., brute-force, abnormal process startup, malicious scripts, web attacks, etc. All the solutions are now serving Alibaba Cloud, raising thousands of intrusion alerts to our customers every day. Finally, we will discuss when and how to use data mining techniques to enhance security awareness and give our advice.