Re: [Nmlrg] Machine Learning in network - solicitation for use cases

["Dacheng Zhang" <[e-mail]>]

在 15-9-6 下午5:01， "Sheng Jiang" <[e-mail]> 写入:

>>Some more detailed introduction.
>>
>>DDoS and APT are very active research topics. Application layer DDoS
>>attacks are more difficult to detect than layer 4 DDoS attacks. In many
>>cases, the application layer DDoS does not introduce large amount
>>traffics. However, by using big data and data mining tech, it is possible
>>to find out the clues of such attacks.
>
>Hi, Dacheng,
>
>Applying machine learning in DDoS protection is an interest use case. For
>my understanding, the machine would learn the potential attack behaviors,
>am I right?
>
>If yes, I have two questions: a) does the machine learning has the
>possibility to learn/identify new attack behaviors, which was not
>recognized before? If yes, what is the working principles? b) is it
>possible for autonomic reaction from the network operational perspective
>after detect such DDoS attack? Give the machine learning may not be
>accurate, my guess is human intervention is needed.
>
>Best regards,
>
>Sheng
>
>>There were some related discussions in Dots. If you are interested, I
>>could find them out later.
>>
>>_______________________________________________
>>nmlrg mailing list
>>[e-mail]
>>https://www.irtf.org/mailman/listinfo/nmlrg