A Real-time Risk Assessment for Information System with CICIDS2017 Dataset Using Machine Learning

Abstract

The purpose of this research was to study the concept and architectural design for Risk Assessment (RA) for information system with the Canadian Institute for Cybersecurity Intrusion Detection Systems 2017 dataset (CICIDS2017 dataset) using Machine Learning (ML) to establish a model. It evaluated the risk on detected network data. The results indicated, the concept consisted of input such as CICIDS2017 dataset, ML, network data and risk matrix.Information system real time RA using CICIDS2017 dataset and ML were processes and the RA on the system were outcomes. In addition, the concept components were improved upon and comprised of four sections; 1) network data capture for network data collection, 2) CICIDS2017 that was intrusion dataset for establishment of a predictive model with ML algorithm, 3) classification predictive model, forecasted on intrusion from network data and 4) RA report, estimated risk of information in risk matrix format. Finally, architectural design, consists of three major parts which includes; network data capture, risk predictive analysis and RA report.