Predicting CyberSecurity Incidents using Machine Learning Algorithms: A Case Study of Korean SMEs

Alaa Mohasseb, Benjamin Aziz, Jeyong Jung, Julak Lee

2019

Abstract

The increasing amount and complexity of cyber security attacks in recent years have made text analysis and data-mining based techniques an important factor in detecting security threats. However, despite the popularity of text and other data mining techniques, the cyber security community has remained somehow reluctant in adopting an open approach to security-related data. In this paper, we analyze a dataset that has been collected from five Small and Medium companies in South Korea, this dataset represents cyber security incidents and response actions. We investigate how the data representing different incidents collected from multiple companies can help improve the classification accuracy and help the classifiers in distinguishing between different types of incidents. A model has been developed using text mining methods, such as n-gram, bag-of-words and machine learning algorithms for the classification of incidents and their response actions. Experimental results have demonstrated good performance of the classifiers for the prediction of different types of response and malware.

Paper Citation

in Harvard Style

Mohasseb A., Aziz B., Jung J. and Lee J. (2019). Predicting CyberSecurity Incidents using Machine Learning Algorithms: A Case Study of Korean SMEs.In Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-359-9, pages 230-237. DOI: 10.5220/0007309302300237

in Bibtex Style

@conference{icissp19,
author={Alaa Mohasseb and Benjamin Aziz and Jeyong Jung and Julak Lee},
title={Predicting CyberSecurity Incidents using Machine Learning Algorithms: A Case Study of Korean SMEs},
booktitle={Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2019},
pages={230-237},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007309302300237},
isbn={978-989-758-359-9},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Predicting CyberSecurity Incidents using Machine Learning Algorithms: A Case Study of Korean SMEs
SN - 978-989-758-359-9
AU - Mohasseb A.
AU - Aziz B.
AU - Jung J.
AU - Lee J.
PY - 2019
SP - 230
EP - 237
DO - 10.5220/0007309302300237