1 / 13

Machine Learning for Cyber

Explore the traditional K Nearest Neighbor (KNN) algorithm, its implementation, and applicability in cyber unit using vector space model for packet representation. Learn to quickly prototype datasets and analyze intrusion detection system packets.

petersonandrew
Download Presentation

Machine Learning for Cyber

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Machine Learning for Cyber Unit : K Nearest Neighbor(KNN)

  2. Learning Objectives • The student will learn about KNN • KNN is a traditional ML algorithm • Simple algorithm/ mechanism

  3. KNN • Notoptimal for big data • Quickly prototype your dataset 10,000 rows 10,000 cols 1,000,000 rows 10,000 cols KNN Neural Network Naïve Bayes traditional Big Data weak Decision Trees Deep Learning 8-Gig RAM GB

  4. KNN Z (F3) Y (F2) X (F1) Vector space model

  5. KNN • IDS = Intrusion Detection System 0101 0101 Email (crypto) web YouTube (good ware) DDos attack Malware Spoofed (bad ware)

  6. IDS

  7. Packets ✓ ✓ ✘ ✘ F1 F2 F3 TCP IP Eth Payload S1 S2 S3 0 1 1 1 0 Y X

  8. Graph F2 F3 F1 F2 F3 F1 S1 S2 S3 0 1 1 1 0 F1 F2 Y X

  9. KNN Destination port (F3) Source port (F2) Protocol (F1)

  10. KNN • Converts data to vector space model • Calculate distance between your X test sample and all other points or sample • Sort distance in ascending order • Select the 5 closest sample KNN(5) and pick the majority class

  11. In the next lesson: • Use KNN in WEKA to analyze and classify our data

  12. Summary • KNN • Traditional machine learning algorithm • Easy to implement • Vector space model and how to represent packets with this model • We learned the mechanism of the KNN algorithm

More Related