WHAP: Web-hacking profiling using Case-Based Reasoning

Mee Lan Han; Hee Chan Han; Ah Reum Kang; Byung Il Kwak; Aziz Mohaisen; Huy Kang Kim

doi:10.1109/CNS.2016.7860503

WHAP: Web-hacking profiling using Case-Based Reasoning

Mee Lan Han, Hee Chan Han, Ah Reum Kang, Byung Il Kwak, Aziz Mohaisen, Huy Kang Kim

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

7 Citations (Scopus)

Abstract

As in the real world's criminal investigation, cyber criminal profiling is important to attribute cyber attacks. Every cyber crime committed by the same hacker or hacking group has unique characteristics such as attack purpose, attack methods, and target's profile. Therefore, a complete analysis of the hacker's activities can give investigators hard evidence to attribute attacks and unveil criminals. In this paper, we implemented WHAP, a profiling system that uses Case-Based Reasoning (CBR). We verified WHAP's usefulness by analyzing large scale of web defacement cases including North Korean hacker's attacks against South Korea, and unveiling a relationship between those attacks and another set of attacks against Sony Pictures Entertainment.

Original language	English
Title of host publication	2016 IEEE Conference on Communications and Network Security, CNS 2016
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	344-345
Number of pages	2
ISBN (Electronic)	9781509030651
DOIs	https://doi.org/10.1109/CNS.2016.7860503
Publication status	Published - 2017 Feb 21
Event	2016 IEEE Conference on Communications and Network Security, CNS 2016 - Philadelphia, United States Duration: 2016 Oct 17 → 2016 Oct 19

Other

Other	2016 IEEE Conference on Communications and Network Security, CNS 2016
Country/Territory	United States
City	Philadelphia
Period	16/10/17 → 16/10/19

ASJC Scopus subject areas

Computer Networks and Communications
Safety, Risk, Reliability and Quality

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1109/CNS.2016.7860503

Cite this

Han, ML, Han, HC, Kang, AR, Kwak, BI, Mohaisen, A & Kim, HK 2017, WHAP: Web-hacking profiling using Case-Based Reasoning. in 2016 IEEE Conference on Communications and Network Security, CNS 2016., 7860503, Institute of Electrical and Electronics Engineers Inc., pp. 344-345, 2016 IEEE Conference on Communications and Network Security, CNS 2016, Philadelphia, United States, 16/10/17. https://doi.org/10.1109/CNS.2016.7860503

@inproceedings{3f8f4dd129764d4d88486cb710c10769,

title = "WHAP: Web-hacking profiling using Case-Based Reasoning",

abstract = "As in the real world's criminal investigation, cyber criminal profiling is important to attribute cyber attacks. Every cyber crime committed by the same hacker or hacking group has unique characteristics such as attack purpose, attack methods, and target's profile. Therefore, a complete analysis of the hacker's activities can give investigators hard evidence to attribute attacks and unveil criminals. In this paper, we implemented WHAP, a profiling system that uses Case-Based Reasoning (CBR). We verified WHAP's usefulness by analyzing large scale of web defacement cases including North Korean hacker's attacks against South Korea, and unveiling a relationship between those attacks and another set of attacks against Sony Pictures Entertainment.",

author = "Han, {Mee Lan} and Han, {Hee Chan} and Kang, {Ah Reum} and Kwak, {Byung Il} and Aziz Mohaisen and Kim, {Huy Kang}",

year = "2017",

month = feb,

day = "21",

doi = "10.1109/CNS.2016.7860503",

language = "English",

pages = "344--345",

booktitle = "2016 IEEE Conference on Communications and Network Security, CNS 2016",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

note = "2016 IEEE Conference on Communications and Network Security, CNS 2016 ; Conference date: 17-10-2016 Through 19-10-2016",

}

TY - GEN

T1 - WHAP

T2 - 2016 IEEE Conference on Communications and Network Security, CNS 2016

AU - Han, Mee Lan

AU - Han, Hee Chan

AU - Kang, Ah Reum

AU - Kwak, Byung Il

AU - Mohaisen, Aziz

AU - Kim, Huy Kang

PY - 2017/2/21

Y1 - 2017/2/21

N2 - As in the real world's criminal investigation, cyber criminal profiling is important to attribute cyber attacks. Every cyber crime committed by the same hacker or hacking group has unique characteristics such as attack purpose, attack methods, and target's profile. Therefore, a complete analysis of the hacker's activities can give investigators hard evidence to attribute attacks and unveil criminals. In this paper, we implemented WHAP, a profiling system that uses Case-Based Reasoning (CBR). We verified WHAP's usefulness by analyzing large scale of web defacement cases including North Korean hacker's attacks against South Korea, and unveiling a relationship between those attacks and another set of attacks against Sony Pictures Entertainment.

AB - As in the real world's criminal investigation, cyber criminal profiling is important to attribute cyber attacks. Every cyber crime committed by the same hacker or hacking group has unique characteristics such as attack purpose, attack methods, and target's profile. Therefore, a complete analysis of the hacker's activities can give investigators hard evidence to attribute attacks and unveil criminals. In this paper, we implemented WHAP, a profiling system that uses Case-Based Reasoning (CBR). We verified WHAP's usefulness by analyzing large scale of web defacement cases including North Korean hacker's attacks against South Korea, and unveiling a relationship between those attacks and another set of attacks against Sony Pictures Entertainment.

UR - http://www.scopus.com/inward/record.url?scp=85015988497&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85015988497&partnerID=8YFLogxK

U2 - 10.1109/CNS.2016.7860503

DO - 10.1109/CNS.2016.7860503

M3 - Conference contribution

AN - SCOPUS:85015988497

SP - 344

EP - 345

BT - 2016 IEEE Conference on Communications and Network Security, CNS 2016

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 17 October 2016 through 19 October 2016

ER -

WHAP: Web-hacking profiling using Case-Based Reasoning

Abstract

Other

ASJC Scopus subject areas

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this