Argumentation Models for Cyber Attribution
A major challenge in cyber-threat analysis is combining information from different sources to find the person or the group responsible for the cyber-attack. It is one of the most important technical and policy challenges in cyber-security. The lack of ground truth for an individual responsible for an attack has limited previous studies. In this paper, we take a first step towards overcoming this limitation by building a dataset from the capture-the-flag event held at DEFCON, and propose an argumentation model based on a formal reasoning framework called DeLP (Defeasible Logic Programming) designed to aid an analyst in attributing a cyber-attack. We build models from latent variables to reduce the search space of culprits (attackers), and show that this reduction significantly improves the performance of classification-based approaches from 37% to 62% in identifying the attacker.
Code (0)
등록된 구현이 없습니다.
Similar Papers 제목 키워드 기반
An Argumentation-Based Framework to Address the Attribution Problem in Cyber-Warfare
Attributing a cyber-operation through the use of multiple pieces of technical evidence (i.e., malware reverse-engineering and source tracking) and conventional intelligence sources (i.e., human or signals intelligence) i…
AttributeAn Argumentation-Based Reasoner to Assist Digital Investigation and Attribution of Cyber-Attacks
We expect an increase in the frequency and severity of cyber-attacks that comes along with the need for efficient security countermeasures. The process of attributing a cyber-attack helps to construct efficient and targe…
Argumentation-based Security for Social Good
The increase of connectivity and the impact it has in every day life is raising new and existing security problems that are becoming important for social good. We introduce two particular problems: cyber attack attributi…
Decision MakingContext-aware feature attribution through argumentation
Feature attribution is a fundamental task in both machine learning and data analysis, which involves determining the contribution of individual features or variables to a model's output. This process helps identify the m…
Additive modelsAgreement Prediction of Arguments in Cyber Argumentation for Detecting Stance Polarity and Intensity
In online debates, users express different levels of agreement/disagreement with one another{'}s arguments and ideas. Often levels of agreement/disagreement are implicit in the text, and must be predicted to analyze coll…
regressionStance Detection