Cyber attack prediction using social data analysis
Munkhdorj Baatarsuren, Yuji Sekiya · Journal of High Speed Networks · 2017
The most common methods used in cyber attack detection are signature scan and anomaly detection. In the case of applying these approaches, a countermeasure against an upcoming cyber attack is made only if a signature of cyber attack or an anomaly is detected. That means cyber defense systems encoun ter cyber attacks with no preparation, and our study focuses on this problem. This time, we attempt to discover the useful social data for the prediction of cyber attack motivation and opportunity. For the prediction of cyber attack motivation, the news articles were used as the dataset. As a result, using Artificial Neural Networks and the core keywords extracted from the news articles directly correlated to a cyber attack or the news articles not correlated to cyber attack brought better precision/recall. For the prediction of cyber attack opportunity, the security vulnerability feeds were used as the dataset. The precision/recall of the prediction result was better when using the core keywords as the feature and Artificial Neural Networks as the prediction algorithm.