# Applications of Machine Learning in Cyber Security: A Review
## 3 The Cyber Security Research Landscape
### Types of Cyber Security
#### 3.1.1 Infrastructure and Network Security  
Discussed together, infrastructure and network security constitute the cornerstone of an effective cyber security framework. This section is an examination of components, methodologies, and interconnectedness, with a particular emphasis on the detection of anomalies within network traffic. Infrastructure security is dedicated to the safeguarding of an organization's vital physical and digital assets, preventing operational disruptions, data breaches, and damage to assets [13]. These encompass data centers, servers, network devices, and ancillary power networks. Prominent strategies entail the following:  
* Physical security measures: biometric access, deployment of security personnel, and surveillance systems preventing unauthorized physical access [14].
* Virtual protection mechanisms: sophisticated intrusion detection systems, routine security assessments to identify and rectify vulnerabilities, and the maintenance of current software and hardware [15].
* Redundancy and resilience: backup systems and alternative data routes ensure service continuity [13].  
Network security focuses on the protection of data in transit and the infrastructure of the network from unauthorized access, attacks, or data exfiltration, comprising the following:  
* Firewalls: a defense line between secure/internal and potentially unsafe/external networks [16].
* Intrusion Detection and Prevention Systems (IDPS): monitor network traffic to identify and automatically mitigate potential threats [17, 18].
* Two-Factor Authentication (2 FA): two forms of user identification prior to granting network access [19].
* Remote access management: network access to authorized personnel; e.g., through a Virtual Private Network (VPN).  
The surveillance of network traffic is instrumental for the early detection of irregularities, which may be indicative of a security threat, emanating either internally (e.g., from a compromised laptop) or externally (for instance, from an external Domain Name System (DNS) server). This prevents proliferation deeper into the network or adverse impacts on  
\begin{table}
\begin{tabular}{l l} \hline \hline
**Type** & **Role \& Methods** \\ \hline Infrastructure security & Protects infrastructure, such as power networks and data centers, and confirms the absence of any gaps \\  & _Physical security–virtual security–redundancy/resilience_ \\ \hline Network security & Protects networks from intrusions by utilizing certain tools, such as intrusion detection and prevention systems (IDPS), remote access management (AC), two-factor authentication (2 FA), and firewalls \\  & _Firewalls–IDPS–2 FA–AC_ \\ \hline Application security & Executes convoluted codes to preserve and encrypt data and codes in a way that is difficult to crack \\  & _Security by design (spearating system, embedded, application)_ \\ \hline Information security & Protects data from unauthorized access and modifications \\  & _Database and communication encryption–AC_ \\ \hline User education & Safeguards all of the above systems by reducing human error factors, especially those related to providing access \\ \hline \hline \end{tabular}
\end{table}
Table 1: Types of cyber security.  
essential infrastructure. The deployment of advanced tools and technologies, notably ML, plays a vital role in the efficacious detection of anomalies within network traffic. Such tools are indispensable for safeguarding against intricate threats, including advanced persistent threats, zero-day exploits, and other sophisticated attacks that may elude conventional security measures [18].