Monash Admin, Author at IMPACT: Monash Business School | Page 6 of 23

In Focus

COVID-19
Climate Change

View

Articles
People
Videos
Podcasts
Departments & Research Centres
Contact us
RSS feeds

Topics

Accounting
Auditing
Banking
Behavioural economics
Big Data
Business
China
Climate Change
Corporate regulation
COVID-19
Digital disruption
Diversity
Economics
Economy
Energy
Experimental economics
Health economics
Investing
Labour market
Leadership
Legal
Management
Marketing
Organisational performance
Retail
Superannuation
Sustainability
Tax
Trade

Subscribe to our newsletter

Your Search Terms:

Posts of this
Author

Saving blood: Managing supply without health risks

Health economics - 16 Feb 2021

Saving blood: Managing supply without health risks

Changes to patient blood management guidelines have lowered health risks for patients and reduced costs with fewer blood transfusions and less time spent in the hospital.

Things you need to know before using a debt management company

COVID-19 - 2 Feb 2021

Things you need to know before using a debt management company

As more Australians struggle with debt due to COVID-19, the services of credit repair or debt management companies may seem attractive. But it pays to look more closely.

Fuelled by a Netflix blockbuster, chess is making a comeback – and that’s good for children

Economics - 2 Feb 2021

Fuelled by a Netflix blockbuster, chess is making a comeback – and that’s good for children

Learning to play chess at school helps teach young people to take more risks in the game of life.

Despite overhaul attempts, super still fails lower income earners

Superannuation - 19 Jan 2021

Despite overhaul attempts, super still fails lower income earners

Efforts by the Australian Government to make the superannuation system fairer have failed to flow through to lower-income earners.

Firms prepped for working from home fared better during the pandemic

Accounting - 19 Jan 2021

Firms prepped for working from home fared better during the pandemic

Firms that prepared well for employees to work from home were more resilient during the pandemic, with stronger operational performances, higher credit ratings and lower costs of debt.

Shopping during COVID-19 made us feel better

Retail - 8 Dec 2020

Shopping during COVID-19 made us feel better

During the COVID-19 pandemic, Australians have shopped online to stop feeling lonely, or to stave off boredom and anxiety.

I was on the panel of the Retirement Income Review. These are our findings

Superannuation - 8 Dec 2020

I was on the panel of the Retirement Income Review. These are our findings

Dr Deborah Ralston explains how the panel has established a valuable fact base on the retirement system.

The battle to retain COVID’s flexible work arrangements

COVID-19 - 2 Dec 2020

The battle to retain COVID’s flexible work arrangements

Researchers seek to investigate the work-life balance experience of workers during the COVID-19 and help shape new laws.

Retirement Income Review: Is the Superannuation Guarantee worth the cost?

Superannuation - 25 Nov 2020

Retirement Income Review: Is the Superannuation Guarantee worth the cost?

Australian households have reduced their voluntary savings, partially offsetting the effects of compulsory superannuation.

The case for Key Audit Matters in audit regulation

Auditing - 25 Nov 2020

The case for Key Audit Matters in audit regulation

Changes to audit reports are valuable to independent investors and this benefit accrues to Non-Big 4 firms.

Earlier, cheaper: How COVID has changed our Christmas shopping habits

COVID-19 - 23 Nov 2020

Earlier, cheaper: How COVID has changed our Christmas shopping habits

The fallout from COVID-19 is changing the way Australians will shop for their family and friends this Christmas.

Cybersecurity: how data scrutiny can thwart attacks

Big Data - 12 Nov 2020

Cybersecurity: how data scrutiny can thwart attacks

Can a new method of analysing big datasets help organisations fight off cyber attacks?

Subscribe to our newsletter

We acknowledge and pay respects to the Elders and Traditional Owners of the land on which our four Australian campuses stand. Information for Indigenous Australians

In Focus

COVID-19
Climate Change

View

Articles
People
Videos
Podcasts
Departments & Research Centres
Contact us
RSS feeds

Topics

Accounting
Auditing
Banking
Behavioural economics
Big Data
Business
China
Climate Change
Corporate regulation
COVID-19
Digital disruption
Diversity
Economics
Economy
Energy
Experimental economics
Health economics
Investing
Labour market
Leadership
Legal
Management
Marketing
Organisational performance
Retail
Superannuation
Sustainability
Tax
Trade

Registered higher education provider

ABN 12 377 614 012

CRICOS Provider Number

Monash University: 00008C
Monash College: 01857J

Authorised by

Monash Business School

Maintained by

eSolutions Service Desk

Accessibility
Disclaimer & copyright
Terms & conditions
Data privacy & cyber security
Data Consent Settings

Copyright © 2021 Monash University

SUBSCRIBE TO IMPACT

* Mandatory

First Name *

Last Name *

Email *

Job Title

Organisation / Institute

Country

My relationship** with Monash University (tick all that apply):
I'm an alumnus, friend or supporter (including donors, mentors and industry partners)
I'm a Monash student
I'm interested in studying at Monash
I recently applied to study at Monash
I'm a Monash staff member
I recently participated in research activities or studies with Monash
Other

I agree to receive marketing communications from Monash Business School. Monash University values the privacy of every individual's personal information and is committed to the protection of that information from unauthorised use and disclosure except where permitted by law. For information about the handling of your personal information please see Data Protection and Privacy Procedure and our ** Data Protection and Privacy Collection Statements.

If you have any questions about how Monash University is collecting and handling your personal information, please contact our Data Protection and Privacy Office at dataprotectionofficer@monash.edu.

REPUBLISH

Terms

You may republish this article online or in print under our Creative Commons licence. You may not edit or shorten the text, you must attribute the article to Impact, and you must include the author’s name in your republication.

If you have any questions, please email mbus-impact@monash.edu

License

Creative Commons Attribution-No Derivatives

Title

Cybersecurity: how data scrutiny can thwart attacks

Content

<h2>Can a new method of analysing big datasets help organisations fight off cyber attacks?</h2>
<p>Governments and businesses are facing growing challenges to their organisations through cybersecurity attacks as they increasingly rely on network-connected platforms and the internet.</p>
<p>Toll, Microsoft, the Australian Department of Defence, Facebook, Zoom and Bluescope Steel are just some of the organisations that have been targeted.</p>
<p>Not only must organisations have secure cyber systems, but they also need to have safeguards in place to detect these attacks quickly.</p>
<p>Analysing the automatically generated logs from network and system devices provides detailed information into how secure these systems actually are. This data can also be used to predict such attacks.</p>
<h1>Predicting and identifying attacks</h1>
<p>But the real challenge is the sheer volume of the data set. The data size means that predicting or even identifying attacks is difficult.</p>
<p>In 2014, a team led by Professor Rob Hyndman, Head of Department of Econometrics and Business Statistics at Monash Business School, was approached by Yahoo.</p>
<p>Yahoo was looking for ways to prevent and identify cybersecurity attacks on its mail servers.</p>
<p>“They needed to know where their engineers should focus attention to check if there was an attack or a faulty server,” Professor Hyndman says.</p>
<p>Professor Hyndman developed a method combining time-series features with Principal Component Analysis.</p>
<p>The approach allowed him to simplify a very large and complicated data set into just two measures for each server which captured much of the variation in the data.</p>
<h1>Identifying anomalies</h1>
<p>He then used a method he developed in the mid-1990s to find the most unusual observations using only these two measures.</p>
<p>This statistical method of using time series features with Principal Component Analysis to identify anomalies has also been used more broadly, including the identification of problems with water quality.</p>
<p>Working in conjunction with the Queensland Government’s Department of Environment and Science and researchers from QUT and RMIT, Professor Hyndman is currently analysing data from sensors placed along the river networks that run to the Great Barrier Reef.</p>
<p>The sensors record data on a range of measures such as nitrate levels within the water and enable scientists to monitor the health of the river network</p>
<p>“Because of the Government’s intention to roll out a large number of these sensors, it is not practical for someone to drive out and check these sensors for any anomalies,” he says.</p>
<p>“Instead we are using statistical methods to identify any measurements that show up as unusual. This may be due to pollution in the river or malfunction in the sensor itself.</p>
<p>“We know that the reading of one sensor should be similar to the one upstream. So, we are using a prediction-based anomaly technique to identify any usual readings. Automating these readings is resulting in quicker investigations and is much more cost-effective.”</p>
<div id="attachment_2655" style="width: 1034px" class="wp-caption aligncenter"><img loading="lazy" decoding="async" aria-describedby="caption-attachment-2655" class="wp-image-2655 size-large" src="https://impact.monash.edu/wp-content/uploads/2021/11/Rob-hyndman-2-GettyImages-1051413784-scaled.jpg" alt=" width="1024" height="684" /><p id="caption-attachment-2655" class="wp-caption-text">Yahoo was looking for ways to prevent and identify cybersecurity attacks on its mail servers.</p></div>
<h1>Network detection</h1>
<p>In order to prevent cyber attacks, Professor Hyndman says many organisations use Network Intrusion Detection Systems (NIDS).</p>
<p>Generally, there are two main categories of these systems: signature-based NIDS and anomaly-based NIDS.</p>
<p>Signature-based NIDS identifies misuse by scanning the activities’ signatures against a database of known malicious activities signatures.</p>
<p>“Signature-based NIDS identifies attacks that are similar to previous attacks,” says Professor Hyndman. “So, if an attacker is smart, they just have to make a slight change and they can avoid being detected.”</p>
<p>In an anomaly-based NIDS, a profile of normal activities is developed using statistical models and future activities are then compared against this profile.</p>
<p>Anything unusual is identified as a potential anomaly, so a new type of attack can still be detected. This is known as an ‘unsupervised’ algorithm because it works without human classification of what is an attack and what is not.</p>
<p>Yet, Professor Hyndman says there still needs to be human involvement to review and classify potential anomalies as normal or malicious to ensure an appropriate model of ‘normal activity’ can be developed. This does not scale well for very large data sets.</p>
<h1>Training dataset problems</h1>
<p>Unsupervised learning methods do not require a clean dataset which is free of attacks. They work in two phases. The training phase is where a model is used to learn the normal behaviour of a system using a normal activity dataset.</p>
<p>In the monitoring phase, the model is used to evaluate the behaviour of future data and any identification of an ‘anomaly’ that is subsequently classified as normal is included as part of the profile.</p>
<p>“The advantage of this method is that it has the ability to identify never-seen-before attacks,” Professor Hyndman says</p>
<p>“However, these algorithms can require a lot of computing power and memory.”</p>
<p>Principal Component Analysis can be used for these algorithms because it is fast and scalable. However, it can still miss important features in the data.</p>
<p>In his most recent work, Professor Hyndman is working with Dr Sevvandi Kandanaarachchi (RMIT) to find better ways to reduce a large amount of data down to a small number of measures in a way that highlights the unusual observations.</p>
<p>“Ideally, we want a fast method that scales to huge data sets and allows us to automatically spot cyber attacks, or find anomalies in river network sensors, in real-time,” Professor Hyndman says.</p>