Abstract:It is important to understand to what extent, and in what perspectives, cyber attacks can be predicted. Despite its evident importance, this problem was not investigated until very recently, when we proposed using the innovative methodology of {\em gray-box prediction}. This methodology advocates the use of gray-box models, which accommodate the statistical properties/phenomena exhibited by the data. Specifically, we showed that gray-box models that accommodate the Long-Range Dependence (LRD) phenomenon can predict the attack rate (i.e., the number of attacks per unit time) 1-hour ahead-of-time with an accuracy of 70.2-82.1\%. To the best of our knowledge, this is the first result showing the feasibility of prediction in this domain. We observe that the prediction errors are partly caused by the models' incapability in predicting the large attack rates, which are called {\em extreme values} in statistics. This motivates us to analyze the {\em extreme-value phenomenon}, by using two complementary approaches: the Extreme Value Theory (EVT) and the Time Series Theory (TST). In this paper, we show that EVT can offer long-term predictions (e.g., 24-hour ahead-of-time), while gray-box TST models can predict attack rates 1-hour ahead-of-time with an accuracy of 86.0-87.9\%. We explore connections between the two approaches, and point out future research directions. Although our prediction study is based on specific cyber attack data, our methodology can be equally applied to analyze any cyber attack data of its kind.

Forecasting severity of software vulnerability using grey model GM(1,1)

Predicting Severity of Software Vulnerability Based on Grey System Theory.

Vulnerability Severity Prediction Model for Software Based on Markov Chain.

A Generalized Multivariate Grey Prediction Model DGM(1, N, I) with Unknown Time Delays

Vulnerability Time Series Prediction Based on Multivariable LSTM

A Novel Vulnerability Prediction Model to Predict Vulnerability Loss Based on Probit Regression

Application of grey multi-variable forecasting model in predicting urban water consumption

Integrate the Gm(1,1) and Verhulst Models to Predict Software Stage Effort

Forecasting the risk of software choices: A model to foretell security vulnerabilities from library dependencies and source code evolution

A Forecasting Approach Using Support Vector Machine Combined with Grey System

Grey Prediction of Port Throughput Based on GM(1,1,α) Model

Probabilistic accumulation grey forecasting model and its properties

Demand Forecast of Weapon Equipment Spare Parts Based on Improved Gray-Markov Model

Predicting Cyber Attack Rates with Extreme Values

Application of grey model in prediction for railway freight volume

Equipment Failure Prediction Based on the Gray Markov Model

A Vulnerability Severity Prediction Method Based on Bimodal Data and Multi-Task Learning

Short-term power load forecasting using grey correlation contest modeling

A Novel Multi-Variable Grey Prediction Model and Its Application in Sino-Russian Timber Trade Volume Forecasting

Application of Grey-Markov Chain Model in Software Reliability Prediction

A generalized grey model with symbolic regression algorithm and its application in predicting aircraft remaining useful life