Early detection of the security incidents and correct forecasting of the attack development is
the basis for the efficient and timely response to cyber threats. The development of the attack …

In 2019, the majority of companies used at least one cloud computing service and it is
expected that by the end of 2021, cloud data centres will process 94% of workloads. The …

The notion of the attacker profile is often used in risk analysis tasks such as cyber attack
forecasting, security incident investigations and security decision support. The attacker …

This paper addresses the critical need for enhanced threat analysis amid escalating cyber
threats. Recognizing limitations in current network-level Attack Graphs (AGs), including …

Traditional reactive approach of blacklisting botnets fails to adapt to the rapidly evolving
landscape of cyberattacks. An automated and proactive approach to detect and block botnet …

An essential factor toward ensuring the security of individuals and critical infrastructures is
the timely detection of potentially threatening situations. To this end, especially in the law …

Traditional reactive approach of blacklisting botnets fails to adapt to the rapidly evolving
landscape of cyberattacks. An automated and proactive approach to detect and block botnet …

We study automated intrusion detection in an IT infrastructure, specifically the problem of
identifying the start of an attack, the type of attack, and the sequence of actions an attacker …

Increasingly, the computer networks supporting the operations of organizations face a
higher quantity and sophistication of cyber-incidents. Due to the evolving complexity of these …

Постановка задачи: модель атакующего является одной из ключевых моделей,
применяемых в задачах анализа информационной безопасности, а ее определение …