Data Mining in Cyber Operations

Abstract

The Global cyber infrastructure presents many challenges because of the complexity and massive amounts of information transferred across the global network daily. The cyber infrastructure is a made up of the data resources, network protocols, computing platforms, and computational services that bring people, information, and computational tools together. Data mining techniques are necessary as a need emerges to be able to automatically analyze, classify and summarize the massive amount of data to be considered. Cyber operators and analyst need to quickly be able to identify key indicators and discover and analyze trends in the data. They often could greatly benefit from automated tools to flag anomalies or high priority events of interest. This chapter presents some of the key research areas, trends, and some methods for addressing the big data challenges in cyber operations.