Building and Evaluating User Network Profiles for Cybersecurity Using Serverless Architecture

Abstract

Serverless computing is a novel usage of cloud computing that offers programmers an environment to execute functions with no concerns on the infrastructure where the code runs. This work presents a serverless implementation of a technique used in cybersecurity, which focuses on the identification of unexpected behaviors from network users by means of TopK rankings. The implementation proposed leverages the potential of serverless computing by integrating the following services from Amazon Web Services: Lambda, DynamoDB, SQS and S3. The running time required to process user network traffic was dramatically reduced in comparison to other implementations of the same algorithm.