A Cloud Computing Based Network Monitoring and Threat Detection System for Critical Infrastructures

摘要: Critical infrastructure systems perform functions and missions that are essential for our national economy, health, security. These vital to commerce, government, society closely interrelated with people's lives. To provide highly secured critical systems, a scalable, reliable robust threat monitoring detection system should be developed efficiently mitigate cyber threats. In addition, big data from pose serious challenges operations because an ever growing number of devices in the amount complex collected require scalable methods capture, store, manage, process data. address these challenges, this paper, we propose cloud computing based network make secure. Our proposed consists three main components: agents, infrastructure, operation center. build system, use both Hadoop MapReduce Spark speed up processing by separating streams concurrently. With real-world set, conducted experiments evaluate effectiveness terms monitoring, detection, performance. empirical indicates can monitor activities, find abnormal behaviors, detect threats protect systems.