Analyzing Big Data to Mitigate Cyber Attacks Using Machine Learning Classifications: A Comparative Study of an Efficient Classifier Set

Abstract

In this research, we address a set of methodological approaches and approaches in scientific research in the field of cybersecurity and big data analysis using machine learning techniques, which have made the data analysis process easier to understand and mitigate cyberattacks. This method involves data processing and analysis in a series of stages, or in the form of analytical protection layers, including analysis and organization of large databases,. Training and qualifying classifiers is a method for reducing the dimensionality and skewness of feature vectors according to basic procedure analysis.. Using the principal components in the analysis, we employ various binary classifiers for vector K-nearest neighbors and many other algorithms, such as Bayesian algorithms and others, analyze vector machines, as well as artificial intelligence, which work to increase the efficiency and accuracy of attack detection devices. Artificial neural networks are also highly efficient in detecting  cyberattacks and analyzing all network disturbances. Through our research, the basic idea was to classify and segment data and deal with each type of data separately to facilitate processing. Another approach is to combine data classifiers. This idea relies on two options: soft voting and majority voting. Each approach has its own method and method for specific use. methods for intrusion detection and penetration of large databases. In the first approach, we analyze and process data in parallel by classifying and dividing it into several subsets, and assigning each subset a separate path. In this method, we partition the problem, making the solution simpler and the data less complex. In the other approach, we also use sensors to collect client data within search servers. The sensor contains a set of parallel paths, each path analyzes the data and information for the client, and is conducted through a parallel network that detects anomalies through two different data sets. One group contains computer network traffic, which includes examining data and hosts from distributed denial of service (DDOS) attacks. The other group contains the Internet of Things and its data.