Method of Marketplace Legitimate User and Attacker Profiling

Abstract

The number and complexity of cybercrime are constantly growing. New types of attacks and competition are emerging. The number of systems is growing faster than new cybersecurity professionals are learning, making it increasingly difficult to track users' actions in real-time manually. E-commerce is incredibly active. Not all retailers have enough resources to maintain their online stores, so they are forced to work with intermediaries. Unique trading platforms increasingly perform the role of intermediaries with their electronic catalogs (showcases), payment and logistics services, quality control - marketplaces. The article considers the problem of protecting the personal data of marketplace users. The article aims to develop a mathematical behavior model to increase the protection of the user's data to counter fraud (antifraud). Profiling can be built in two directions: profiling a legitimate user and an attacker (profitability and scoring issues are beyond the scope of this study). User profiling is based on typical behavior, amounts, and quantities of goods, the speed of filling the electronic cart, the number of refusals and returns, etc. A proprietary model for profiling user behavior based on the Python programming language and the Scikit-learn library using the method of random forest, linear regression, and decision tree was proposed, metrics were used using an error matrix, and algorithms were evaluated. As a result of comparing the evaluation of these algorithms of three methods, the linear regression method showed the best results: A is 98.60%, P is 0.01%, R is 0.54%, F is 0.33%. 2% of violators have been correctly identified, which positively affects the protection of personal data.

Comparative Analysis of Strategies for Building Second and Third Level of 125 “Cyber Security” Educational Programs

“…Досвід проведення оцінки вразливостей, тестування на проникнення[36] та аудиту безпеки[37]. Знання практик безпечного кодування, криптографії[38], безпечних мережевих архітектур[39] -[41] та методологій розробки безпечного програмного забезпечення[42]. Вміння налаштовувати та керувати інфраструктурою безпеки, наприклад, брандмауерами, системами виявлення та запобігання вторгненням, а також системами управління інформацією та подіями безпеки (SIEM).3.…”