A0523
Title: Spatio-temporal analysis of dependent risk with an application to cyberattacks data
Authors: Chae Young Lim - Seoul National University (Korea, South)
Songhyun Kim - Seoul National University (Korea, South) [presenting]
Yeonwoo Rho - Michigan Technological University (United States)
Abstract: Cybersecurity is an important issue, given the increasing risks due to cyberattacks in many areas. Cyberattacks could result in huge losses such as data breaches, failures in the control systems of infrastructures, physical damages in manufacturing industries, etc. As a result, cybersecurity-related research has grown rapidly for in-depth analysis. The main interest is to understand the correlated nature of cyberattack data. To understand such characteristics, a spatial-temporal model is proposed for the host-wisely aggregated cyberattack data by incorporating the characteristics of the attackers. A new dissimilarity measure as a proxy of spatial distance is developed to be integrated into the model. The proposed model can be considered a spatial extension of the GARCH model. The estimation is carried out using a Bayesian approach, which is demonstrated to work well in simulations. The proposed model is applied to publicly available honeypot data after the data are divided by selected features of the attackers via clustering. The estimated model parameters vary by groups of attackers, which was not revealed by modelling the entire dataset.
