An Investigation into the Performances of the State-of-the-art Machine Learning Approaches for Various Cyber-attack Detection: A Survey (2402.17045v2)
Abstract: In this research, we analyzed the suitability of each of the current state-of-the-art machine learning models for various cyberattack detection from the past 5 years with a major emphasis on the most recent works for comparative study to identify the knowledge gap where work is still needed to be done with regard to detection of each category of cyberattack. We also reviewed the suitability, effeciency and limitations of recent research on state-of-the-art classifiers and novel frameworks in the detection of differnet cyberattacks. Our result shows the need for; further research and exploration on machine learning approach for the detection of drive-by download attacks, an investigation into the mix performance of Naive Bayes to identify possible research direction on improvement to existing state-of-the-art Naive Bayes classifier, we also identify that current machine learning approach to the detection of SQLi attack cannot detect an already compromised database with SQLi attack signifying another possible future research direction.
- Comparative analysis of machine learning classifiers for phishing detection. In 2022 6th International Conference on Informatics and Computational Sciences (ICICoS), pages 84–88. IEEE, 2022.
- An sql injection detection model using chi-square with classification techniques. In 2021 International Conference on Electrical, Computer and Energy Technologies (ICECET), pages 1–8. IEEE, 2021.
- Machine learning approach for detection of flooding dos attacks in 802.11 networks and attacker localization. International Journal of Machine Learning and Cybernetics, 7:1035–1051, 2016.
- G Ajeetha and G Madhu Priya. Machine learning based ddos attack detection. In 2019 Innovations in Power and Advanced Computing Technologies (i-PACT), volume 1, pages 1–5. IEEE, 2019.
- Ofmcdm/irf: A phishing website detection model based on optimized fuzzy multi-criteria decision-making and improved random forest. In 2023 Silicon Valley Cybersecurity Conference (SVCC), pages 1–8. IEEE, 2023.
- Email phishing detection based on naïve bayes, random forests, and svm classifications: A comparative study. In 2022 IEEE 12th Annual Computing and Communication Workshop and Conference (CCWC), pages 0007–0011. IEEE, 2022.
- Man-in-the-middle and denial of service attacks detection using machine learning algorithms. Bulletin of Electrical Engineering and Informatics, 12(1):418–426, 2023.
- Manar Hasan Ali AL-Maliki and Mahdi Nsaif Jasim. Comparison study for nlp using machine learning techniques to detecting sql injection vulnerabilities. International Journal of Nonlinear Analysis and Applications, 2023.
- SCAMM: Detection and prevention of SQL injection attacks using a machine learning approach. PhD thesis, Brac University, 2021.
- A deep learning-based innovative technique for phishing detection in modern security with uniform resource locators. Sensors, 23(9):4403, 2023.
- Phishing detection based on machine learning and feature selection methods. 2019.
- Detecting phishing domains using machine learning. Applied Sciences, 13(8):4649, 2023.
- Detecting phishing websites using machine learning. In 2022 International Congress on Human-Computer Interaction, Optimization and Robotic Applications (HORA), pages 1–6. IEEE, 2022.
- Security analysis of ddos attacks using machine learning algorithms in networks traffic. Electronics, 10(23):2919, 2021.
- Efficient phishing detection and prevention using support vector machine (svm) algorithm. In 2023 IEEE 12th International Conference on Communication Systems and Network Technologies (CSNT), pages 545–548. IEEE, 2023.
- Prediction of sql injection attacks in web applications. In Computational Science and Its Applications–ICCSA 2019: 19th International Conference, Saint Petersburg, Russia, July 1–4, 2019, Proceedings, Part IV 19, pages 496–505. Springer, 2019.
- Tsehay Admassu Assegie. K-nearest neighbor based url identification model for phishing attack detection. Indian Journal of Artificial Intelligence and Neural Networking, 1:18–21, 2021.
- A high-accuracy phishing website detection method based on machine learning. Journal of Information Security and Applications, 77:103553, 2023.
- Detection of cyber attacks: Xss, sqli, phishing attacks and detecting intrusion using machine learning algorithms. In 2022 IEEE Global Conference on Computing, Power and Communication Technologies (GlobConPT), pages 1–6. IEEE, 2022.
- K-nearest neighbour classifier for url-based phishing detection mechanism. Turkish Journal of Computer and Mathematics Education (TURCOMAT), 14(03):34–40, 2023.
- Xgboost classifier for ddos attack detection and analysis in sdn-based cloud. In 2018 IEEE international conference on big data and smart computing (bigcomp), pages 251–256. IEEE, 2018.
- Sql injection attack detection in network flow data. Computers & Security, 127:103093, 2023.
- Development of a compressive framework using machine learning approaches for sql injection attacks. 1(7):183–189, 2022.
- Effective intrusion detection system using xgboost. Information, 9(7):149, 2018.
- Machine learning ddos detection for consumer internet of things devices. In 2018 IEEE Security and Privacy Workshops (SPW), pages 29–35. IEEE, 2018.
- Chapter 4 - exploratory study. In Thomas W. Edgar and David O. Manz, editors, Research Methods for Cyber Security, pages 95–130. Syngress, 2017.
- Analysis of machine learning classifiers for early detection of ddos attacks on iot devices. Arabian Journal for Science and Engineering, 47(2):1353–1374, 2022.
- M Gopinath and Sibi Chakkaravarthy Sethuraman. A comprehensive survey on deep learning based malware detection techniques. Computer Science Review, 47:100529, 2023.
- An ensemble method for phishing websites detection based on xgboost. In 2022 14th international conference on computer research and development (ICCRD), pages 214–219. IEEE, 2022.
- Improving text classification with weighted word embeddings via a multi-channel textcnn model. Neurocomputing, 363:366–374, 2019.
- Detection of sql injection attacks: a machine learning approach. In 2019 International Conference on Electrical and Computing Technologies and Applications (ICECTA), pages 1–6. IEEE, 2019.
- A proposed technique for simultaneously detecting ddos and sql injection attacks. Int. J. Comput. Appl, 183(11):50–57, 2021.
- Machine learning based ddos attack detection from source side in cloud. In 2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud), pages 114–120. IEEE, 2017.
- Sql injection detection using machine learning techniques. In 2021 8th International Conference on Soft Computing & Machine Intelligence (ISCMI), pages 15–20. IEEE, 2021.
- Development of anti-phishing browser based on random forest and rule of extraction framework. Cybersecurity, 3(1):1–14, 2020.
- Ai powered anti-cyber bullying system using machine learning algorithm of multinomial naïve bayes and optimized linear support vector machine. arXiv preprint arXiv:2207.11897, 2022.
- Performance comparison and implementation of bayesian variants for network intrusion detection. arXiv preprint arXiv:2308.11834, 2023.
- Adversarial sampling for fairness testing in deep neural network. arXiv preprint arXiv:2303.02874, 2023.
- Detecting browser drive-by exploits in images using deep learning. Electronics, 12(3):473, 2023.
- Decision tree based intrusion detection system for nsl-kdd dataset. In Information and Communication Technology for Intelligent Systems (ICTIS 2017)-Volume 2 2, pages 207–218. Springer, 2018.
- Artificial intelligence techniques for sql injection attack detection. In Proceedings of the 2023 8th International Conference on Intelligent Information Technology, pages 38–45, 2023.
- Appropriate detection of ham and spam emails using machine learning algorithm. In 2023 International Conference on Advances in Computing, Communication and Applied Informatics (ACCAI), pages 1–5. IEEE, 2023.
- Phishing detection system through hybrid machine learning based on url. IEEE Access, 11:36805–36822, 2023.
- A comparative study of machine learning techniques for phishing website detection. In Role of Data-Intensive Distributed Computing Systems in Designing Data Solutions, pages 97–109. Springer, 2023.
- Detection of phishing websites by using machine learning-based url analysis. In 2020 11th International Conference on Computing, Communication and Networking Technologies (ICCCNT), pages 1–7. IEEE, 2020.
- Sql injection detection using machine learning. vol, 11:11, 2021.
- K Varun Kumar and M Ramamoorthy. Machine learning-based spam detection using naïve bayes classifier in comparison with logistic regression for improving accuracy. Journal of Pharmaceutical Negative Results, pages 548–554, 2022.
- Machine-learning based ddos attack classifier in software defined network. In 2020 17th International Conference on Electrical Engineering/Electronics, Computer, Telecommunications and Information Technology (ECTI-CON), pages 431–434. IEEE, 2020.
- Detect malicious web pages using naive bayesian algorithm to detect cyber threats. Wireless Personal Communications, pages 1–13, 2023.
- A novel intelligent approach for man-in-the-middle attacks detection over internet of things environments based on message queuing telemetry transport. Expert Systems, page e13263, 2023.
- A machine learning-based classification and prediction technique for ddos attacks. IEEE Access, 10:21443–21454, 2022.
- Phishing site detection classification model using machine learning approach. Engineering, MAthematics and Computer Science (EMACS) Journal, 5(2):63–67, 2023.
- Feature selection for phishing website by using naive bayes classifier. In 2023 11th International Symposium on Digital Forensics and Security (ISDFS), pages 1–4. IEEE, 2023.
- Proactive detection of ddos attacks utilizing k-nn classifier in an anti-ddos framework. International Journal of Computer and Information Engineering, 4(3):537–542, 2010.
- Phishing detection using machine learning techniques. In 2023 3rd Asian Conference on Innovation in Technology (ASIANCON), pages 1–6. IEEE, 2023.
- Data mining in the context of legality, privacy, and ethics. 2023.
- A naïve bayes based pattern recognition model for detection and categorization of structured query language injection attack. 2018.
- Kamal Omari. Comparative study of machine learning algorithms for phishing website detection. International Journal of Advanced Computer Science and Applications, 14(9), 2023.
- Content based phishing detection with machine learning. In 2020 International Conference on Electrical Engineering (ICEE), pages 1–6. IEEE, 2020.
- Phish-sight: a new approach for phishing detection using dominant colors on web pages and machine learning. International Journal of Information Security, pages 1–11, 2023.
- Detection of sql injection using machine learning: a survey. Int. Res. J. Eng. Technol.(IRJET), 6(11):239–246, 2019.
- A ddos attack detection method based on machine learning. In Journal of Physics: Conference Series, volume 1237, page 032040. IOP Publishing, 2019.
- Improved intrusion detection system that uses machine learning techniques to proactively defend ddos attack. In ITM Web of Conferences, volume 56, page 05011. EDP Sciences, 2023.
- Comparative analysis of k-nearest neighbor and decision tree in detecting distributed denial of service. In 2020 8th International Conference on Information and Communication Technology (ICoICT), pages 1–4. IEEE, 2020.
- Classification of phishing websites using machine learning models. In 2023 3rd International conference on Artificial Intelligence and Signal Processing (AISP), pages 1–5. IEEE, 2023.
- Enhanced website phishing detection based on the cyber kill chain and cloud computing. Indonesian Journal of Electrical Engineering and Computer Science, 32(1):517–529, 2023.
- Ranking of machine learning algorithms based on the performance in classifying ddos attacks. In 2015 IEEE Recent Advances in Intelligent Computational Systems (RAICS), pages 185–190. IEEE, 2015.
- Webpages classification with phishing content using naive bayes algorithm. In Knowledge Management in Organizations: 14th International Conference, KMO 2019, Zamora, Spain, July 15–18, 2019, Proceedings 14, pages 249–258. Springer, 2019.
- Sql injection attack detection by machine learning classifier. In 2022 International Conference on Applied Artificial Intelligence and Computing (ICAAIC), pages 394–400. IEEE, 2022.
- Xgboost classifier for ddos attack detection in software defined network using sflow protocol. International Journal on Advanced Science, Engineering & Information Technology, 13(2), 2023.
- Detecting phishing attacks using feature importance-based machine learning approach. In 2023 IEEE AFRICON, pages 1–6. IEEE, 2023.
- Kishwar Sadaf. Phishing website detection using xgboost and catboost classifiers. In 2023 International Conference on Smart Computing and Application (ICSCA), pages 1–6. IEEE, 2023.
- Detection of man in the middle attack using machine learning. In 2022 2nd International Conference on Computing and Information Technology (ICCIT), pages 388–393. IEEE, 2022.
- Detection of ddos attacks using machine learning algorithms. In 2020 7th International Conference on Computing for Sustainable Global Development (INDIACom), pages 16–21. IEEE, 2020.
- A machine learning approach for ddos (distributed denial of service) attack detection using multiple linear regression. In Proceedings, volume 63, page 51. MDPI, 2020.
- Feature selection for phishing website classification. International Journal of Advanced Computer Science and Applications, 11(4), 2020.
- Sql injection attack detection using machine learning algorithm. In 2021 5th International Conference on Trends in Electronics and Informatics (ICOEI), pages 1166–1169. IEEE, 2021.
- Dishing out dos: How to disable and secure the starlink user terminal. arXiv preprint arXiv:2303.00582, 2023.
- Man in the middle attack detection for mqtt based iot devices using different machine learning algorithms. In 2022 2nd International Conference on Artificial Intelligence (ICAI), pages 118–121. IEEE, 2022.
- Seun Mayowa Sunday. Phishing website detection using machine learning: Model development and django integration. Journal of Electrical Engineering, Electronics, Control and Computer Science, 9(3):39–54, 2023.
- Manjula Suresh and R Anitha. Evaluating machine learning algorithms for detecting ddos attacks. In Advances in Network Security and Applications: 4th International Conference, CNSA 2011, Chennai, India, July 15-17, 2011 4, pages 441–452. Springer, 2011.
- Detecting sql injection attacks in cloud saas using machine learning. In 2020 IEEE 6th Intl Conference on Big Data Security on Cloud (BigDataSecurity), IEEE Intl Conference on High Performance and Smart Computing,(HPSC) and IEEE Intl Conference on Intelligent Data and Security (IDS), pages 145–150. IEEE, 2020.
- Performance evaluation of botnet ddos attack detection using machine learning. Evolutionary Intelligence, 13:283–294, 2020.
- A comparative analysis of machine learning-based website phishing detection using url information. In 2022 5th International Conference on Pattern Recognition and Artificial Intelligence (PRAI), pages 220–224. IEEE, 2022.
- An innovative method to improve performance analysis in classification with accuracy of phishing websites using random forest algorithm by comparing with support vector machine algorithm. In AIP Conference Proceedings, volume 2655. AIP Publishing, 2023.
- A combination of textcnn model and bayesian classifier for microblog sentiment analysis. Journal of Combinatorial Optimization, 45(4):109, 2023.
- Sql injection detection for web applications based on elastic-pooling cnn. IEEE Access, 7:151475–151481, 2019.
- Convolutional neural networks: an overview and application in radiology. Insights into imaging, 9:611–629, 2018.
- Palla Yaswanth and V Nagaraju. Prediction of phishing sites in network using naive bayes compared over random forest with improved accuracy. In 2023 Eighth International Conference on Science Technology Engineering and Mathematics (ICONSTEM), pages 1–5. IEEE, 2023.
- An evaluation on knn-svm algorithm for detection and prediction of ddos attack. In Trends in Applied Knowledge-Based Systems and Data Science: 29th International Conference on Industrial Engineering and Other Applications of Applied Intelligent Systems, IEA/AIE 2016, Morioka, Japan, August 2-4, 2016, Proceedings 29, pages 95–102. Springer, 2016.
- Ddos attack detection using machine learning techniques in cloud computing environments. In 2017 3rd international conference of cloud computing technologies and applications (CloudTech), pages 1–7. IEEE, 2017.
- Dtof-ann: an artificial neural network phishing detection model based on decision tree and optimal features. Applied Soft Computing, 95:106505, 2020.