Security Related Data Mining

Data mining is the process that extracts, classifies and analyzes valid and useful information from large volumes of data provided by multiple sources. The data mining has been widely applied into various areas, one of which is to investigate potential security threats. In the literature, various data mining techniques such as classification and clustering have been proposed to detect intrusions, DoS attacks, and malware. This paper surveys different data mining techniques applied to detect security threats and analyzes their advantages and disadvantages. Through comparison, we discuss open research issues about security-related data mining and propose future research focus.