Utilizing Adaptive Machine Learning Algorithms for Information Risk Warning and Network Security Scenario Awareness...

This study proposes a novel framework for network security situational awareness and risk warning in cloud computing environments, integrating adaptive Machine Learning (ML), Hierarchical Multi-Label Classification (HMC), and a dynamic trust evaluation mechanism based on the cloud model. The complexity, diversity, and real-time nature of emerging cyberattacks-such as zero-day exploits, distributed denial-of-service (DDoS), and botnets-pose significant challenges to traditional rule-based and static detection methods. To address these challenges, we developed an effective SDN-based cloud architecture utilizing the Ryu OpenFlow controller and OpenFlow switches. This architecture enables real-time link information collection, dynamic scheduling, and scalable, reliable data transmission. The hierarchical classification framework suggested can break multiclass problems into binary tasks, alleviating the effect of sample imbalance and enhancing the recognition of low-frequency attacks, including User to Root (U2R). Ensemble learning techniques, including AdaBoost and Bagging, further enhance detection accuracy for fine-grained attack types. Experiments conducted on DDoS datasets, cloud traffic data, and simulations in Mininet and EstiNet demonstrate that the combined ML-HMC-trust approach significantly improves detection precision, reduces false positives, and enables real-time response. These results confirm that integrating adaptive learning, hierarchical classification, and dynamic trust evaluation provides a robust and scalable solution for securing large-scale cloud platforms.