SEARCH FOR INFORMATIVE FEATURES BASED ON THE PRINCIPAL COMPONENT METHOD IN MALICIOUS TRAFFIC IDENTIFICATION AND ASSESSMENT TASKS

2024

Full text Open access: Hybrid Metadata (CSL-JSON)
DOI 10.52167/1609-1817-2024-132-3-406-418
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

The proposed study will be aimed at improving the accuracy of detecting malicious traffic in telecommunications networks of companies. One of the important tasks of the study was to develop a model of the required network traffic feature space by highlighting the most informative features of network packets. Due to the fact that the analysis of all the features present in network traffic requires large computing resources and the redundancy of the analyzed data can lead to retraining of the developed model, there is an urgent need to reduce the size of the feature space by highlighting the most informative and excluding less informative features. This article proposes the application of the principal component method to achieve the goal of identifying the most informative features from network traffic. The proposed approach increases the reliability of the results of identification of malicious traffic of companies, without loss of quality.