Applications of Positive Unlabeled (PU) and Negative Unlabeled (NU) Learning in Cybersecurity

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Dilworth, Robert, Gudla, Charan
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866910734580973568
author Dilworth, Robert
Gudla, Charan
author_facet Dilworth, Robert
Gudla, Charan
contents This paper explores the relatively underexplored application of Positive Unlabeled (PU) Learning and Negative Unlabeled (NU) Learning in the cybersecurity domain. While these semi-supervised learning methods have been applied successfully in fields like medicine and marketing, their potential in cybersecurity remains largely untapped. The paper identifies key areas of cybersecurity--such as intrusion detection, vulnerability management, malware detection, and threat intelligence--where PU/NU learning can offer significant improvements, particularly in scenarios with imbalanced or limited labeled data. We provide a detailed problem formulation for each subfield, supported by mathematical reasoning, and highlight the specific challenges and research gaps in scaling these methods to real-time systems, addressing class imbalance, and adapting to evolving threats. Finally, we propose future directions to advance the integration of PU/NU learning in cybersecurity, offering solutions that can better detect, manage, and mitigate emerging cyber threats.
format Preprint
id arxiv_https___arxiv_org_abs_2412_06203
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Applications of Positive Unlabeled (PU) and Negative Unlabeled (NU) Learning in Cybersecurity
Dilworth, Robert
Gudla, Charan
Cryptography and Security
Machine Learning
This paper explores the relatively underexplored application of Positive Unlabeled (PU) Learning and Negative Unlabeled (NU) Learning in the cybersecurity domain. While these semi-supervised learning methods have been applied successfully in fields like medicine and marketing, their potential in cybersecurity remains largely untapped. The paper identifies key areas of cybersecurity--such as intrusion detection, vulnerability management, malware detection, and threat intelligence--where PU/NU learning can offer significant improvements, particularly in scenarios with imbalanced or limited labeled data. We provide a detailed problem formulation for each subfield, supported by mathematical reasoning, and highlight the specific challenges and research gaps in scaling these methods to real-time systems, addressing class imbalance, and adapting to evolving threats. Finally, we propose future directions to advance the integration of PU/NU learning in cybersecurity, offering solutions that can better detect, manage, and mitigate emerging cyber threats.
title Applications of Positive Unlabeled (PU) and Negative Unlabeled (NU) Learning in Cybersecurity
topic Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2412.06203