Battle Ground: Data Collection and Labeling of CTF Games to Understand Human Cyber Operators
Georgel M. Savin, Ammar Asseri, Josiah Dykstra, Jonathan Goohs, Anthony Melaragno, William Casey · 2023
Industry standard frameworks are now widespread for labeling the high-level stages and granular actions of attacker and defender behavior in cyberspace. While these labels are used for atomic actions, and to some extent for sequences of actions, there remains a need for labeled data from realistic full-scale attacks. This data is valuable for better understanding human actors’ decisions, behaviors, and individual attributes. The analysis could lead to more effective attribution and disruption of attackers.