TY - JOUR KW - auto-encoding KW - clustering with outliers KW - Cybersecurity KW - DBSCAN KW - deep learning KW - KNIME Analytics Platform KW - machine learning KW - MITRE ATT@CK framework AU - Arvid Kok AU - Ivana Mestric AU - Giavid Valiyev AU - Michael Street AB -

In this paper we address the approaches, techniques and results of applying machine learning techniques for cyber threat prediction. Timely discovery of advanced persistent threats is of utmost importance for the protection of NATO’s and its allies’ networks. Therefore, NATO and NATO Communication and Information Agency’s Cyber Security service line is constantly looking for improvements. During Coalition Warrior Interoperability Exercise (CWIX) event data was captured on a Red-Blue Team Simulation. The data set was then used to apply a variety of Machine Learning techniques: deep-learning, auto-encoding and clustering with outliers.

BT - Information & Security: An International Journal DA - 2020 DO - https://doi.org/10.11610/isij.4714 IS - 2 LA - eng N2 -

In this paper we address the approaches, techniques and results of applying machine learning techniques for cyber threat prediction. Timely discovery of advanced persistent threats is of utmost importance for the protection of NATO’s and its allies’ networks. Therefore, NATO and NATO Communication and Information Agency’s Cyber Security service line is constantly looking for improvements. During Coalition Warrior Interoperability Exercise (CWIX) event data was captured on a Red-Blue Team Simulation. The data set was then used to apply a variety of Machine Learning techniques: deep-learning, auto-encoding and clustering with outliers.

PY - 2020 SE - 203 SP - 203 EP - 220 T2 - Information & Security: An International Journal TI - Cyber Threat Prediction with Machine Learning VL - 47 ER -