International Conference on Information and Knowledge Technology

فارسی

Home / شانزدهمین کنفرانس بین المللی فناوری اطلاعات و دانش

Intent-Based Classification of Multi-Stage Cyber Attacks Using Attacker TTPs and Machine Learning

Authors :

Fatemeh Imanimehr¹ Hamed Ebrahimi²

1- پژوهشگاه ارتباطات و فناوری اطلاعات 2- پژوهشگاه ارتباطات و فناوری اطلاعات

Keywords :

Multi-Stage Attack،Machine Learning-Based Classification،Adversary TTPs

Abstract :

In this paper, we propose a novel method for classifying multi-stage adversarial attacks based on attacker intent and objectives, leveraging the structured knowledge of adversary behaviors encapsulated in the MITRE ATT\&CK framework. The proposed approach processes outputs from Security Information and Event Management (SIEM) systems and analyzes observed Tactics, Techniques, and Procedures (TTPs) to infer attacker intent through machine learning–based classification. We evaluate four widely used classifiers and select Random Forest as the optimal model based on standard performance metrics. Experimental results demonstrate that the Random Forest classifier accurately identifies attacker intent with high precision and robust performance.

List of archived papers

A Swarm Intelligence Approach to Design Optimal Repeaters in Multilayer Graphene Nanoribbon Interconnects

Majid Sanaeepur - Maryam Momeni

سیستم پیشنهاددهنده غذای سالم با استفاده از داده کاوی عادت های تغذیه ای کاربران

محمد عباسی - مریم حسینی پزوه - محمدرضا شمس

یک رویکرد سریع تحلیل و شناسایی آسیب پذیری Next-Intent در برنامه های کاربردی اندروید

زهرا کلوندی - دکتر مهدی سخائی نیا زهرا کلوندی - مهدی سخائی نیا -

Two Novel Designs of Efficient Single-Bit Comparators in QCA Technology with Ultra-Low Energy Dissipation

Shobeir Fayazi - Hatam Abdoli

Impact of ICT and Digital Evolution on Capital Structure in Companies

Ali Noori

Stock Market Prediction Using Hard and Soft Data Fusion

Saeed Mohammadi Dashtaki - Masoud Alizadeh - Behzad Moshiri

NFV-Based Distributed Service Function Chaining with Imperfect Information

Mahsa Alikhani - Marzieh Sheikhi - Dr Vesal Hakami

ارائه راهکاری جهت مقابله با حملات DoS در شبکه های نرم افزارمحور

ویدا هاشمی - احمد بختیاری شهری - رضا جاویدان

An Improved Drone Detection Method Using Deep Learning for Augmentation Detection Speed

Mohammad Bahrami - Seyyed Amir Asghari - Mohammadreza Binesh Marvasti - Sajjad Ansaria

LLM-Driven Feature Extraction for Stock Market Prediction: A case study of Tehran Stock Exchange

Siavash Hosseinpour Saffarian - Saman Haratizadeh

more

Samin Hamayesh - Version 44.5.0