Abstract:The rapid proliferation of cyberthreats necessitates a robust understanding of their evolution and associated tactics, as found in this study. A longitudinal analysis of these threats was conducted, utilizing a six-year data set obtained from a deception network, which emphasized its significance in the study’s primary aim: the exhaustive exploration of the tactics and strategies utilized by cybercriminals and how these tactics and techniques evolved in sophistication and target specificity over time. Different cyberattack instances were dissected and interpreted, with the patterns behind target selection shown. The focus was on unveiling patterns behind target selection and highlighting recurring techniques and emerging trends. The study’s methodological design incorporated data preprocessing, exploratory data analysis, clustering and anomaly detection, temporal analysis, and cross-referencing. The validation process underscored the reliability and robustness of the findings, providing evidence of increasingly sophisticated, targeted cyberattacks. The work identified three distinct network traffic behavior clusters and temporal attack patterns. A validated scoring mechanism provided a benchmark for network anomalies, applicable for predictive analysis and facilitating comparative study of network behaviors. This benchmarking aids organizations in proactively identifying and responding to potential threats. The study significantly contributed to the cybersecurity discourse, offering insights that could guide the development of more effective defense strategies. The need for further investigation into the nature of detected anomalies was acknowledged, advocating for continuous research and proactive defense strategies in the face of the constantly evolving landscape of cyberthreats.

On the anatomy of cyberattacks

Towards a Framework for Cyber Attack Impact Analysis of Electric Cyber Physical Systems.

Spatiotemporal patterns and predictability of cyberattacks

Building Computer Network Attacks

2001-2013: Survey and Analysis of Major Cyberattacks

Statistical Techniques for Detecting Cyberattacks on Computer Networks Based on an Analysis of Abnormal Traffic Behavior

Formal Description of Cyber Attacks

Cyberpsychology: A Longitudinal Analysis of Cyber Adversarial Tactics and Techniques

Cyber Security; Etiology and Importance

Characterizing the Landscape of COVID-19 Themed Cyberattacks and Defenses

Characterizing Cyber Attacks against Space Systems with Missing Data: Framework and Case Study

Survey on Architectural Attacks: A Unified Classification and Attack Model

Time-varying effects of cyberattacks on firm value

To Change Or To Stick: Unveiling The Consistency Of Cyber Criminal Signatures Through Statistical Analysis

The Social and Psychological Impact of Cyber-Attacks

Threats, Protection and Attribution of Cyber Attacks on Critical Infrastructures

Social Engineering Attacks and Defenses in the Physical World vs. Cyberspace: A Contrast Study

A Characterization of Cybersecurity Posture from Network Telescope Data

A Testbed To Study Adversarial Cyber-Attack Strategies in Enterprise Networks

An In Depth Analysis of a Cyber Attack: Case Study and Security Insights

Evaluating Attacker Risk Behavior in an Internet of Things Ecosystem