Метод атрибуції кібератак на основі індикаторів компрометації із використанням штучного інтелекту

Abstract

This work is devoted to the method of attribution of cyberattacks. It is based on the use of compromising indicators of existing Russian hacker groups and the possibility of attributing attacks using artificial intelligence. Thanks to artificial intelligence, attack indicators are compared and, in the future, the involvement of a particular group of hackers is determined. Gathering data on a cyberattack will also allow the identification of new, previously unknown groups of hackers. Determining the totality of attack factors allows us to further diagnose a cyber attack and improve the security of the system