Cybersecurity Methodology for Specialized Behavior Analysis

Abstract

Analyzing attacker behavior and generating realistic models to accurately capture the realities of cybersecurity threats is a very challenging task for researchers. Psychological personality and profiling studies provide a broad understanding of personality traits, but lack a level of interactive immersion that enables observers to collect concrete cybersecurity-relevant behavioral data. Participant's intricate actions and interactions with real computer systems are seldom captured in any cybersecurity studies. Our work focuses on capturing human actions and decisions to provide an empirical basis for these types of models. We provide a practical methodology that helps bridge the gap between theory and practice by facilitating construction, experimentation, and data collection for repeatable and scalable human experimentation with realistic cybersecurity scenarios. While our methodology is platform agnostic, we describe state of the art technologies that may be used to satisfy the objectives of each of the stages of the methodology.

Enhancing Network Security Through Router-Based Firewalls: An Investigation into Design, Effectiveness, and Human Factors

“…Cloud computing has the adaptability of resource allocation [13]. Resource allocation is a technique that distributes the available resources in a cloud data center among users.…”

“…By continuously monitoring network traffic, it captures and establishes a baseline of regular activity and interactions and has identified a reference point for subsequent network activity. (Padilla et al, 2021) When activity deviates from this established standard, it immediately issues an alert. By recognizing these deviations in real-time, the system ensures that potential threats are identified and dealt with promptly, in terms of detecting threats that may not necessarily be overtly malicious but may have subtle patterns of anomalies.…”

Plug-and-Play: Framework for Remote Experimentation in Cyber Security

“…A possible solution to the problems above is remote experimentation. Such experiments might be conducted at scale and enrich the cyber security community with larger, more comprehensive datasets that are currently lacking [15]. ensures true representation and inclusivity in terms of participants and experimental environment, while control enables researchers to isolate variables and components being studied [5].…”