Automatic detection of emerging threats to computer networks

Abstract

South Africa is growing increasingly reliant on information and communications technology (ICT) to provide access to information and services. In making progress towards bridging the digital divide, our country now faces a host of increasingly sophisticated threats against personal, financial and confidential information of both organisations and individuals. The potential impact of these threats is amplified due to the penetration of ICT systems into critical infrastructure such as the electricity grid, banks, the stock exchange and others. Conventional network security mechanisms are no longer able to protect computing resources from emerging threats due to the growing complexity of computer networks and technology. The purpose of network intrusion detection technology is to detect threats to networked information systems and networking infrastructure in an automated fashion, thereby providing an opportunity to deploy countermeasures. This presentation showcases the research and development of this technology at the CSIR, with emphasis on novel techniques for detecting emerging threats.