Abstract:Today’s world is highly network interconnected owing to the pervasiveness of small personal devices (e.g., smartphones) as well as large computing devices or services (e.g., cloud computing or online banking), and thereby each passing minute millions of data bytes are being generated, processed, exchanged, shared, and utilized to yield outcomes in specific applications. Thus, securing the data, machines (devices), and user’s privacy in cyberspace has become an utmost concern for individuals, business organizations, and national governments. In recent years, machine learning (ML) has been widely employed in cybersecurity, for example, intrusion or malware detection and biometric-based user authentication. However, ML algorithms are vulnerable to attacks both in the training and testing phases, which usually leads to remarkable performance decreases and security breaches. Comparatively, limited studies have been conducted to understand the essence and degree of the vulnerabilities of ML techniques against security threats and their defensive mechanisms. It is imperative to systematize recent works related to cybersecurity using ML to seek the attention of researchers, scientists, and engineers. Therefore, in this paper, we provide a comprehensive survey of the works that have been carried out most recently (from 2013 to 2018) on ML in cybersecurity, describing the basics of cyber-attacks and corresponding defenses, the basics of the most commonly used ML algorithms, and proposed ML and data mining schemes for cybersecurity in terms of features, dimensionality reduction, and classification/detection techniques. In this context, this article also provides an overview of adversarial ML, including the security characteristics of deep learning methods. Finally, open issues and challenges in cybersecurity are highlighted and potential future research directions are discussed.

Network anomaly detection and security defense technology based on machine learning: A review

Review: Deep Learning Methods for Cybersecurity and Intrusion Detection Systems

Machine Learning for Security in Vehicular Networks: A Comprehensive Survey

Machine Learning in Network Anomaly Detection: A Survey

A Review on Cybersecurity based on Machine Learning and Deep Learning Algorithms

Review on the application of deep learning in network attack detection

Application of Machine Learning in Network Security Situational Awareness

Machine Learning-Based Research on Network Security\'s Primary Technologies

Machine Learning and Deep Learning Methods for Cybersecurity

Machine learning in cybersecurity: a comprehensive survey

The Intersection of Machine Learning and Wireless Sensor Network Security for Cyber-Attack Detection: A Detailed Analysis

Machine Learning for Detecting Anomalies and Intrusions in Communication Networks

Research on computer network information security based on improved machine learning

Experimental Review of Neural-based approaches for Network Intrusion Management

A Systematic Review on Machine Learning and Deep Learning Models for Electronic Information Security in Mobile Networks

Machine Learning-Powered Anomaly Detection: Enhancing Data Security and Integrity

Intrusion detection systems for software-defined networks: a comprehensive study on machine learning-based techniques

Utilizing Machine Learning and Deep Learning in Cybesecurity: An Innovative Approach

Cloud Network Anomaly Detection Using Machine and Deep Learning Techniques— Recent Research Advancements

Performance Analysis of Anomaly-Based Network Intrusion Detection Using Feature Selection and Machine Learning Techniques