General Science and Philosophy

    

A Markov Multi-Phase Transferable Belief Model: an Application for Predicting Data Exfiltration Apts

Authors: Georgios Ioannou, Panos Louvieris, Natalie Clewley, Gavin Powell

eXfiltration Advanced Persistent Threats (XAPTs) increasingly account for incidents concerned with intelligence information gathering by malicious adversaries. This research exploits the multi-phase nature of an XAPT, mapping its phases into a cyber attack kill chain. A novel Markov Multi-Phase Transferable Belief Model (MM-TBM) is proposed and demonstrated for fusing incoming evidence from a variety of sources which takes into account conflicting information. The MM-TBM algorithm predicts a cyber attacker’s actions against a computer network and provides a visual representation of their footsteps.

Comments: 8 Pages.

Download: PDF

Submission history

[v1] 2014-12-04 03:20:48

Unique-IP document downloads: 285 times

Vixra.org is a pre-print repository rather than a journal. Articles hosted may not yet have been verified by peer-review and should be treated as preliminary. In particular, anything that appears to include financial or legal advice or proposed medical treatments should be treated with due caution. Vixra.org will not be responsible for any consequences of actions that result from any form of use of any documents on this website.

Add your own feedback and questions here:
You are equally welcome to be positive or negative about any paper but please be polite. If you are being critical you must mention at least one specific error, otherwise your comment will be deleted as unhelpful.

comments powered by Disqus