The most common methods used in cyber attack detection are signature scan and anomaly detection. In the case of applying these approaches, a countermeasure against an upcoming cyber attack is made only if a signature of cyber attack or an anomaly is detected. That means cyber defense systems encounter cyber attacks with no preparation, and our study focuses on this problem. This time, we attempt to discover the useful social data for the prediction of cyber attack motivation and opportunity. For the prediction of cyber attack motivation, the news articles were used as the dataset. As a result, using Artificial Neural Networks and the core keywords extracted from the news articles directly correlated to a cyber attack or the news articles not correlated to cyber attack brought better precision/recall. For the prediction of cyber attack opportunity, the security vulnerability feeds were used as the dataset. The precision/recall of the prediction result was better when using the core keywords as the feature and Artificial Neural Networks as the prediction algorithm.
A.Amin, S.Anwar, A.Adnan, M.A.Khan and Z.Iqbal, Classification of cyber attacks based on rough set theory, in: 2015 First International Conference on Anti-Cybercrime (ICACC), IEEE, 2015.
J.Bollen, H.Mao and X.Zeng, Twitter mood predicts the stock market, Journal of Computational Science2(1) (2011), 1–8.
6.
W.Boyer and M.McQueen, Ideal based cyber security technical metrics for control systems, in: International Workshop on Critical Information Infrastructures Security, Springer, Berlin, 2007, pp. 246–260.
7.
C.-C.Chang and C.-J.Lin, LIBSVM: A library for support vector machines, ACM Transactions on Intelligent Systems and Technology (TIST)2(3) (2011), Article No. 27.
8.
R.Collobert, J.Weston, L.Bottou, M.Karlen, K.Kavukcuoglu and P.Kuksa, Natural language processing (almost) from scratch, Journal of Machine Learning Research12 (2011), 2493–2537.
9.
Common Vulnerabilities and Exposures, https://cve.mitre.org/.
10.
Common Vulnerability Scoring System v3.0: Specification Document, https://www.first.org/cvss/specification-document.
11.
Common Vulnerability Scoring System, V3 Development Update, https://www.first.org/cvss.
FIRST is the global Forum for Incident Response and Security Teams, https://www.first.org/.
14.
R.Gandhi, A.Sharma, W.Mahoney, W.Sousan, Q.Zhu and P.Laplante, Dimensions of cyber-attacks: Cultural, social, economic, and political, Technology and Society Magazine30(1) (2011), 28–38.
15.
I.Goodfellow, Y.Bengio and A.Courville, Deep Learning, MIT Press, 2016, http://www.deeplearningbook.org.
16.
Google Custom Search Engine, https://cse.google.jp.
17.
J.Grimmer and B.M.Stewart, Text as data: The promise and pitfalls of automatic content analysis methods for political texts, Political Analysis23(3) (2013), 267–297.
18.
HACKMAGEDDON – Information Security Timelines and Statistics, http://www.hackmageddon.com/.
19.
H.Holm, M.Ekstedt and D.Andersson, Empirical analysis of system-level vulnerability metrics through actual attacks, Transactions on Dependable and Secure Computing9(6) (2012), 825–837.
20.
A.K.Jain, Data clustering: 50 years beyond K-means, Pattern Recognition Letters31(8) (2010), 651–666. doi:10.1016/j.patrec.2009.09.011.
21.
T.Joachims, Introduction to Support Vector Machines, Cambridge University Press, Cambridge, 2002.
22.
N.Kalchbrenner, E.Grefenstette and P.Blunsom, A convolutional neural network for modelling sentences, 2014, arXiv:1404.2188.
23.
S.G.Kene and D.P.Theng, A review on intrusion detection techniques for cloud computing and security challenges, in: 2015 2nd International Conference on Electronics and Communication Systems (ICECS), IEEE, 2015, pp. 227–232.
24.
D.Kingma and J.Ba, Adam: A method for stochastic optimization, 2014, arXiv:1412.6980.
25.
R.Koch, B.Stelte and M.Golling, Attack trends in present computer networks, in: 2012 4th International Conference on Cyber Conflict (CYCON 2012), IEEE, 2012.
26.
R.Kuć and M.Rogozinski, ElasticSearch Server, Packt Publishing Ltd., 2016.
27.
Microsoft Security Advisories, https://technet.microsoft.com/en-us/security/advisories.aspx.
28.
T.Mikolov, I.Sutskever, K.Chen, G.S.Corrado and J.Dean, Distributed representations of words and phrases and their compositionality, in: Advances in Neural Information Processing Systems, 2013, pp. 3111–3119.
29.
S.M.Mohammad and P.D.Turney, Emotions evoked by common words and phrases: Using Mechanical Turk to create an emotion lexicon, in: Proceedings of the NAACL HLT 2010 Workshop on Computational Approaches to Analysis and Generation of Emotion in Text, Association for Computational Linguistics, 2010, pp. 26–34.
30.
National Vulnerability Database, https://nvd.nist.gov/.
H.D.Nguyen, S.Gutta and Q.Cheng, An active distributed approach for cyber attack detection, in: 2010 Conference Record of the Forty Fourth Asilomar Conference on Signals, Systems and Computers (ASILOMAR), IEEE, 2010, pp. 1540–1544.
T.R.Pillai, S.Palaniappan, A.Abdullah and H.M.Imran, Predictive modeling for intrusions in communication systems using GARMA and ARMA models, in: 2015 5th National Symposium on Information Technology: Towards New Smart World (NSITNSW), IEEE, 2015.
36.
C.Sabottke, O.Suciu and T.Dumitra, Vulnerability disclosure in the age of social media: Exploiting Twitter for predicting real-world exploits, in: 24th USENIX Security Symposium (USENIX Security 15), 2015, pp. 1041–1056.
37.
A.C.Sharma, R.A.Gandhi, W.Mahoney, W.Sousan and Q.Zhu, Building a social dimensional threat model from current and historic events of cyber attacks, in: 2010 IEEE Second International Conference on Social Computing (SocialCom), IEEE, 2010, pp. 981–986.
38.
Y.Shynkevich, T.McGinnity, S.Coleman and A.Belatreche, Stock price prediction based on stock-specific and sub-industry-specific news articles, in: 2015 International Joint Conference on Neural Networks (IJCNN), IEEE, 2015.
39.
A.K.Sirohi, P.K.Mahato and V.Attar, Multiple kernel learning for stock price direction prediction, in: 2014 International Conference on Advances in Engineering & Technology Research (ICAETR-2014), IEEE, 2014.
40.
Social Computing, http://isw3.naist.jp/Contents/Research/mi-08-en.html.
41.
H.Takamura, T.Inui and M.Okumura, Extracting semantic orientations of words using spin model, in: Proceedings of the 43rd Annual Meeting on Association for Computational Linguistics, Association for Computational Linguistics, 2005, pp. 133–140.
42.
J.Tang, M.Qu, M.Wang, M.Zhang, J.Yan and Q.Mei, LINE: Large-scale information network embedding, in: Proceedings of the 24th International Conference on World Wide Web, ACM, 2015, pp. 1067–1077.
43.
The Security Content Automation Protocol (SCAP), https://scap.nist.gov/.
B.Wormuth and P.Becker, Introduction to formal concept analysis, in: 2nd International Conference of Formal Concept Analysis, 2004.
48.
K.Yoon, Convolutional neural networks for sentence classification, 2014, arXiv:1408.5882.
49.
Z.Zhan, M.Xu and S.Xu, Predicting cyber attack rates with extreme values, IEEE Transactions on Information Forensics and Security10(8) (2015), 1666–1677.
