NetFlow based Cyber Threat Classification using J48 and Random Forest Machine Learning Algorithms

Abstract

In the field of information technology cyber security plays a vital role. Securing information is the biggest challenge now a days. As the word cyber security comes in our mind the fear of cybercrime comes in us at the same time. Cyber threats are nothing but an activity by which any targeted system can be compromised by altering the availability, integrity, and confidentiality of the system. To overcome such type of threats there are number of mechanisms available. Recently the Machine Learning (ML) approaches have proved to be a milestone for the classification of NetFlows. The NetFlow is a network protocol designed by CISCO which is used to collect the network traffic (NetFlows). In this paper J48 and Random Forest (RF) machine learning algorithms are used for classification of cyber threats using NetFlows. The results are obtained by applying classification algorithms on NetFlows using Weka ML tool and RStudio. A comparison is made in various perspectives like accuracy, true positive (TP), false positive (FP), etc.