Mining user interaction patterns in the darkweb to predict enterprise cyber incidents

09/24/2019
by   Soumajyoti Sarkar, et al.
0

With rise in security breaches over the past few years, there has been an increasing need to mine insights from social media platforms to raise alerts of possible attacks in an attempt to defend conflict during competition. In this study, we attempt to build a framework that utilizes unconventional signals from the darkweb forums by leveraging the reply network structure of user interactions with the goal of predicting enterprise related external cyber attacks. We use both unsupervised and supervised learning models that address the challenges that come with the lack of enterprise attack metadata for ground truth validation as well as insufficient data for training the models. We validate our models on a binary classification problem that attempts to predict cyber attacks on a daily basis for an organization. Using several controlled studies on features leveraging the network structure, we measure the extent to which the indicators from the darkweb forums can be successfully used to predict attacks. We use information from 53 forums in the darkweb over a span of 17 months for the task. Our framework to predict real world organization cyber attacks of 3 different security events, suggest that focusing on the reply path structure between groups of users based on random walk transitions and community structures has an advantage in terms of better performance solely relying on forum or user posting statistics prior to attacks.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
10/30/2018

DARKMENTION: A Deployed System to Predict Enterprise-Targeted External Cyberattacks

Recent incidents of data breaches call for organizations to proactively ...
research
03/26/2018

Forecasting Cyber Attacks with Imbalanced Data Sets and Different Time Granularities

If cyber incidents are predicted a reasonable amount of time before they...
research
06/08/2018

Discovering Signals from Web Sources to Predict Cyber Attacks

Cyber attacks are growing in frequency and severity. Over the past year ...
research
04/06/2020

Challenges in Forecasting Malicious Events from Incomplete Data

The ability to accurately predict cyber-attacks would enable organizatio...
research
12/01/2020

Cyber-Attack Consequence Prediction

Cyber-physical systems posit a complex number of security challenges due...
research
03/24/2022

Automatic User Profiling in Darknet Markets: a Scalability Study

In this study, we investigate the scalability of state-of-the-art user p...
research
09/09/2023

Characterizing Cyber Attacks against Space Systems with Missing Data: Framework and Case Study

Cybersecurity of space systems is an emerging topic, but there is no sin...

Please sign up or login with your details

Forgot password? Click here to reset