Leon Reznik 
Intelligent Security Systems [PDF ebook] 
How Artificial Intelligence, Machine Learning and Data Science Work For and Against Computer Security

Acknowledgments ix
Introduction xi
1 Computer Security with Artificial Intelligence, Machine Learning, and Data Science Combination: What? How? Why? And Why Now and Together? 1
1.1 The Current Security Landscape 1
1.2 Computer Security Basic Concepts 7
1.3 Sources of Security Threats 9
1.4 Attacks Against Io T and Wireless Sensor Networks 13
1.5 Introduction into Artificial Intelligence, Machine Learning, and Data Science 18
1.6 Fuzzy Logic and Systems 31
1.7 Machine Learning 35
1.8 Artificial Neural Networks (ANN) 43
1.9 Genetic Algorithms (GA) 50
1.10 Hybrid Intelligent Systems 51
Review Questions 52
Exercises 53
References 54
2 Firewall Design and Implementation: How to Configure Knowledge for the First Line of Defense? 57
2.1 Firewall Definition, History, and Functions: What Is It? And Where Does It Come From? 57
2.2 Firewall Operational Models or How Do They Work? 65
2.3 Basic Firewall Architectures or How Are They Built Up? 70
2.4 Process of Firewall Design, Implementation, and Maintenance or What Is the Right Way to Put All Things Together? 75
2.5 Firewall Policy Formalization with Rules or How Is the Knowledge Presented? 82
2.6 Firewalls Evaluation and Current Developments or How Are They Getting More and More Intelligent? 96
Review Questions 104
Exercises 106
References 107
3 Intrusion Detection Systems: What Do They Do Beyond the First Line of Defense? 109
3.1 Definition, Goals, and Primary Functions 109
3.2 IDS from a Historical Perspective 113
3.3 Typical IDS Architecture Topologies, Components, and Operational Ranges 116
3.4 IDS Types: Classification Approaches 121
3.5 IDS Performance Evaluation 131
3.6 Artificial Intelligence and Machine Learning Techniques in IDS Design 136
3.7 Intrusion Detection Challenges and Their Mitigation in IDS Design and Deployment 159
3.8 Intrusion Detection Tools 163
Review Questions 172
Exercises 174
References 175
4 Malware and Vulnerabilities Detection and Protection: What Are We Looking for and How? 177
4.1 Malware Definition, History, and Trends in Development 177
4.2 Malware Classification 182
4.3 Spam 214
4.4 Software Vulnerabilities 216
4.5 Principles of Malware Detection and Anti-malware Protection 219
4.6 Malware Detection Algorithms 229
4.7 Anti-malware Tools 237
Review Questions 240
Exercises 242
References 243
5 Hackers versus Normal Users: Who Is Our Enemy and How to Differentiate Them from Us? 247
5.1 Hacker’s Activities and Protection Against 247
5.2 Data Science Investigation of Ordinary Users’ Practice 273
5.3 User’s Authentication 288
5.4 User’s Anonymity, Attacks Against It, and Protection 301
Review Questions 309
Exercises 310
References 311
6 Adversarial Machine Learning: Who Is Machine Learning Working For? 315
6.1 Adversarial Machine Learning Definition 315
6.2 Adversarial Attack Taxonomy 316
6.3 Defense Strategies 320
6.4 Investigation of the Adversarial Attacks Influence on the Classifier Performance Use Case 322
6.5 Generative Adversarial Networks 327
Review Questions 333
Exercises 334
References 335
Index 337

Leon Reznik, Ph D, is Professor in the Department of Computer Science at Rochester Institute of Technology, USA. He received his doctorate in Information and Measurement Systems in 1983 at the St. Petersburg State Polytechnic University. He has published four books and numerous book chapters, conference papers, and journal articles.