Скачать или смотреть Analyzing Network Traffic Logs to Detect Unusual Activity Using Python

The research analyzes atypical network traffic in the CIC IDS2017 dataset through Python-based exploratory data analysis and unsupervised anomaly detection methods, concentrating on DDoS activities during Friday afternoon working hours. In the year 2018, CIC-IDS2017 dataset, which had been published by the Canadian Institute for Cybersecurity in 2017. This research is intended to demonstrate the ways in which interpretable, statistics-based algorithms, which make use of data-science libraries that are widespread, could be used to detect suspicious acts that require further investigation by security specialists. Three different types of visual representations a throughput histogram, a DBSCAN scatter plot, and a bar chart of leading destination ports are utilized in order to provide support for the empirical findings as well as to establish a connection between the analysis and the most recent research on the subject of intrusion detection.