Recommender Systems Meeting Security: From Product Recommendation to Cyber-Attack Prediction [chapter]

Nikolaos Polatidis, Elias Pimenidis, Michalis Pavlidis, Haralambos Mouratidis
2017 Communications in Computer and Information Science  
Modern information society depends on reliable functionality of information systems infrastructure, while at the same time the number of cyberattacks has been increasing over the years and damages have been caused. Furthermore, graphs can be used to show paths than can be exploited by attackers to intrude into systems and gain unauthorized access through vulnerability exploitation. This paper presents a method that builds attack graphs using data supplied from the maritime supply chain
more » ... cture. The method delivers all possible paths that can be exploited to gain access. Then, a recommendation system is utilized to make predictions about future attack steps within the network. We show that recommender systems can be used in cyber defense by predicting attacks. The goal of this paper is to identify attack paths and show how a recommendation method can be used to classify future cyber-attacks. The proposed method has been experimentally evaluated and it is shown that it is both practical and effective.
doi:10.1007/978-3-319-65172-9_43 fatcat:onz52y3h5vel3pb64zoyzuckpm