loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Vladislavs Minkevics and Janis Kampars

Affiliation: Riga Technical University, Kalku 1, Riga, Latvia

Keyword(s): IS Security, Big Data, Malware, Security Methods and Techniques, DGA.

Abstract: This paper presents the architecture of a modular, big-data based IS security management system (ISMS) and elaborates one of its modules – the domain generation algorithm (DGA) generated domain detection module. The presented methods, models and techniques are used in Riga Technical University, and can be used in any other large organization to stand against IS security challenges. The paper describes how organization can construct IS security management system using mostly free and open source tools and reach it’s IS security goals by preventing or minimizing consequences of malware with little impact on employee’s privacy. The presented DGA detection module provides detection of malicious DNS requests by extracting features from domain names and feeding them into random forest classifier. ISMS doesn’t rely solely of DGA detection and instead uses an ensemble of modules and algorithms for increasing the accuracy of the overall system. The presented IS security management system can be employed in real-time environment and its DGA detection module allows to identify infected device as soon as it starts to communicate with the botnet command and control centre to obtain new commands. The presented model has been validated in the production environment and has identified infected devices which were not detected by antivirus software nor by firewall or Intrusion Detection System. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.141.47.163

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Minkevics, V. and Kampars, J. (2020). Methods, Models and Techniques to Improve Information System’s Security in Large Organizations. In Proceedings of the 22nd International Conference on Enterprise Information Systems - Volume 1: ICEIS; ISBN 978-989-758-423-7; ISSN 2184-4992, SciTePress, pages 632-639. DOI: 10.5220/0009572406320639

@conference{iceis20,
author={Vladislavs Minkevics. and Janis Kampars.},
title={Methods, Models and Techniques to Improve Information System’s Security in Large Organizations},
booktitle={Proceedings of the 22nd International Conference on Enterprise Information Systems - Volume 1: ICEIS},
year={2020},
pages={632-639},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0009572406320639},
isbn={978-989-758-423-7},
issn={2184-4992},
}

TY - CONF

JO - Proceedings of the 22nd International Conference on Enterprise Information Systems - Volume 1: ICEIS
TI - Methods, Models and Techniques to Improve Information System’s Security in Large Organizations
SN - 978-989-758-423-7
IS - 2184-4992
AU - Minkevics, V.
AU - Kampars, J.
PY - 2020
SP - 632
EP - 639
DO - 10.5220/0009572406320639
PB - SciTePress