There is a tremendous increase in the frequency of cyberattacks due to the rapid growth of the Internet. These attacks can be prevented by many well-known cybersecurity solutions. However, many traditional solutions are becoming obsolete because of the impact of big data over networks. Hence, corporate research has shifted its focus on security analytics. The role of security analytics is to detect malicious and normal events in real time by assisting network managers in the investigation of real-time network streams. This technique is intended to enhance all traditional security approaches. The various challenges have to be addressed to investigate the potential of big data for information security. This chapter will focus on the major information security problems that can be solved by big data applications and outlines research directions for security intelligence by applying security analytics. This chapter presents a system called seabed, which facilitates efficient analytics on huge encrypted datasets. Besides, we will discuss a lightweight anomaly detection system (ADS) that is scalable in nature. The identified anomalies will aid us to provide better cybersecurity by examining the network behavior, identifying the attacks and protecting the critical infrastructures.

Chapter Contents:

• 1.1 Introduction to big data analytics
• 1.2 Big data: huge potentials for information security
• 1.3 Big data challenges for cybersecurity
• 1.4 Related work on decision engine techniques
• 1.5 Big network anomaly detection
• 1.6 Big data for large-scale security monitoring
• 1.7 Mechanisms to prevent attacks
• 1.8 Big data analytics for intrusion detection system
• 1.8.1 Challenges of ADS
• 1.8.2 Components of ADS
• 1.8.2.1 Capturing and lodging module
• 1.8.2.2 Preprocessing module
• 1.9 Conclusion
• Acknowledgment
• Abbreviations
• References

Inspec keywords: computer crime; Big Data; cryptography; data analysis; computer network security; computer network management

Other keywords: big data analytics; security intelligence; information security; lightweight anomaly detection system; seabed; encrypted datasets; security analytics; cyberattacks; cybersecurity; network behavior

Subjects: Computer communications; Computer networks and techniques; Other DBMS; Computing security management; Data security