arXiv:2411.17931cs.CRcs.AI2024-11

结合暗网情报与物联网扫描,预测网络攻击

Combining Threat Intelligence with IoT Scanning to Predict Cyber Attack

  • 融合暗网数据与IoT设备漏洞扫描,构建预测框架
  • 可识别恶意网站并评估其对IoT设备的威胁程度
  • 适合网络安全研究者与政策制定者参考

尽管网络已成为全球通信平台,但黑客与激进分子常通过‘暗网’传播意识形态内容并协调活动。当前,信息过载与威胁数据碎片化阻碍了对这些行为者的全面画像,限制了对其在线活动的预测分析效能。与此同时,联网设备数量已超过全球人口,并随物联网(IoT)发展持续增长。本文提出一种新型预测性威胁情报框架,系统收集、分析并可视化暗网数据,以识别恶意网站,并将其与潜在IoT漏洞关联。该方法整合自动化数据采集、分析技术与可视化工具,同时评估物联网设备漏洞的可利用性。通过弥合网络安全研究中的空白,本研究旨在提升威胁预测建模能力,并为政策制定提供支持,助力应对日益互联数字生态中的网络风险。

原文摘要 · Abstract (English)

While the Web has become a global platform for communication, malicious actors, including hackers and hacktivist groups, often disseminate ideological content and coordinate activities through the "Dark Web", an obscure counterpart of the conventional web. Presently, challenges such as information overload and the fragmented nature of cyber threat data impede comprehensive profiling of these actors, thereby limiting the efficacy of predictive analyses of their online activities. Concurrently, the proliferation of internet-connected devices has surpassed the global human population, with this disparity projected to widen as the Internet of Things (IoT) expands. Technical communities are actively advancing IoT-related research to address its growing societal integration. This paper proposes a novel predictive threat intelligence framework designed to systematically collect, analyze, and visualize Dark Web data to identify malicious websites and correlate this information with potential IoT vulnerabilities. The methodology integrates automated data harvesting, analytical techniques, and visual mapping tools, while also examining vulnerabilities in IoT devices to assess exploitability. By bridging gaps in cybersecurity research, this study aims to enhance predictive threat modeling and inform policy development, thereby contributing to intelligence research initiatives focused on mitigating cyber risks in an increasingly interconnected digital ecosystem.

威胁情报暗网物联网安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。