Understanding the properties exhibited by Spatial-temporal evolution of cyber attacks improve cyber threat intelligence. In addition, better understanding on threats patterns is a key feature for cyber threats prevention, detection, and management and for enhancing defenses. In this work, we study different aspects of emerging threats in the wild shared by 160,000 global participants form all industries. First, we perform an exploratory data analysis of the collected cyber threats. We investigate the most targeted countries, most common malwares and the distribution of attacks frequency by localisation. Second, we extract attacks' spreading patterns at country level. We model these behaviors using transition graphs decorated with probabilities of switching from a country to another. Finally, we analyse the extent to which cyber threats have been affected by the COVID-19 outbreak and sanitary measures imposed by governments to prevent the virus from spreading.
翻译:了解网络攻击空间-时空演变所展示的特性可以改善网络威胁情报。此外,更好地了解威胁模式是预防、发现和管理网络威胁及加强防御的关键特征。在这项工作中,我们研究了由160 000名全球参与者组成的所有行业所共有的野外新威胁的不同方面。首先,我们对所收集的网络威胁进行探索性数据分析。我们调查了最有针对性的国家、最常见的恶意软件和通过地方化传播攻击频率。第二,我们在国家一级提取攻击的传播模式。我们用具有从一个国家向另一个国家转变可能性的过渡图进行模拟。最后,我们分析了网络威胁在多大程度上受到COVID-19爆发的影响,以及政府为防止病毒传播而实施的卫生措施。