Enhancing Cybersecurity Resilience with CYBRANA: A Cyber YARA/YAML-Based Resilience Firewall Solution Applied with Next-Gen AI

The ever-increasing volume of server requests puts digital infrastructure at more risk of cyberattacks. This paper introduces CYBRANA, a cyberattack detection and mitigation system powered by AI. CYBRANA uses a Random Forest model to look into firewall and server logs for potential malicious threats. After analysis of flagged logs to extract request paths, CYBRANA then maps YAML rules to look for known attack pattern detection. Upon successful detection, CYBRANA classifies the attack type and severity (using CVSS scoring) by mapping it to the MITRE CAPEC framework®. This approach bridges the gap between existing cybersecurity frameworks and server log analysis, enabling a novel security pipeline. By automating threat detection and mitigation, CYBRANA enhances the security posture of digital infrastructure.

Authors

Institutions

Publication Details

Published
2024-10-19
DOI
https://doi.org/10.1109/cvmi61877.2024.10782249
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Enhancing Cybersecurity Resilience with CYBRANA: A Cyber YARA/YAML-Based Resilience Firewall Solution Applied with Next-Gen AI

A Rengarajan, G. R. Karpagam
Network Security and Intrusion Detection
article

Enhancing Cybersecurity Resilience with CYBRANA: A Cyber YARA/YAML-Based Resilience Firewall Solution Applied with Next-Gen AI

A Rengarajan, G. R. Karpagam
article en

Abstract

The ever-increasing volume of server requests puts digital infrastructure at more risk of cyberattacks. This paper introduces CYBRANA, a cyberattack detection and mitigation system powered by AI. CYBRANA uses a Random Forest model to look into firewall and server logs for potential malicious threats. After analysis of flagged logs to extract request paths, CYBRANA then maps YAML rules to look for known attack pattern detection. Upon successful detection, CYBRANA classifies the attack type and severity (using CVSS scoring) by mapping it to the MITRE CAPEC framework®. This approach bridges the gap between existing cybersecurity frameworks and server log analysis, enabling a novel security pipeline. By automating threat detection and mitigation, CYBRANA enhances the security posture of digital infrastructure.

PSG INSTITUTE OF TECHNOLOGY AND APPLIED RESEARCH (IN)
Climate action
Openalex Percentile: Top 74%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.