In today’s digital world, cyberattacks targeting critical infrastructure pose a significant threat to government agencies and organizations. These attacks can disrupt essential services and compromise national security, making it crucial to identify and respond to them quickly. This survey paper discusses the challenges faced in monitoring cyber threats and presents a proposed solution: a real-time cyberattack monitoring tool. This tool uses machine learning and web scraping to gather data from various online sources, storing it in a structured format for easy access. By visualizing the collected data through an interactive dashboard, cybersecurity teams can quickly identify and understand the nature of ongoing attacks. Additionally, the system includes an alert mechanism that notifies teams of high-frequency attack patterns, enabling prompt action. Overall, this solution aims to enhance the ability of organizations to protect their critical infrastructure by providing timely insights and effective incident response strategies.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Real-Time Cyber Incident Monitoring for Critical Information Infrastructure (CII) Using Machine learning and ELK Stack

  • K. V. Deshpande,
  • Sanskruti Parkhe,
  • Varad Pawar,
  • Vaishnavi Thorat,
  • Rutuja Bagad,
  • Priti R. Kale

摘要

In today’s digital world, cyberattacks targeting critical infrastructure pose a significant threat to government agencies and organizations. These attacks can disrupt essential services and compromise national security, making it crucial to identify and respond to them quickly. This survey paper discusses the challenges faced in monitoring cyber threats and presents a proposed solution: a real-time cyberattack monitoring tool. This tool uses machine learning and web scraping to gather data from various online sources, storing it in a structured format for easy access. By visualizing the collected data through an interactive dashboard, cybersecurity teams can quickly identify and understand the nature of ongoing attacks. Additionally, the system includes an alert mechanism that notifies teams of high-frequency attack patterns, enabling prompt action. Overall, this solution aims to enhance the ability of organizations to protect their critical infrastructure by providing timely insights and effective incident response strategies.