TSM: Measuring the Enticement of Honeyfiles with Natural Language Processing

Simple item page
dc.contributor.authorTimmer, Roelien
dc.contributor.authorLiebowitz, David
dc.contributor.authorNepal, Surya
dc.contributor.authorKanhere, Salil
dc.date.accessioned2021-12-24T17:38:00Z
dc.date.available2021-12-24T17:38:00Z
dc.date.issued2022-01-04
dc.description.abstractHoneyfile deployment is a useful breach detection method in cyber deception that can also inform defenders about the intent and interests of intruders and malicious insiders. A key property of a honeyfile, enticement, is the extent to which the file can attract an intruder to interact with it. We introduce a novel metric, Topic Semantic Matching (TSM), which uses topic modelling to represent files in the repository and semantic matching in an embedding vector space to compare honeyfile text and topic words robustly. We also present a honeyfile corpus created with different Natural Language Processing (NLP) methods. Experiments show that TSM is effective in inter-corpus comparisons and is a promising tool to measure the enticement of honeyfiles. TSM is the first measure to use NLP techniques to quantify the enticement of honeyfile content that compares the essential topical content of local contexts to honeyfiles and is robust to paraphrasing.
dc.format.extent10 pages
dc.identifier.doi10.24251/HICSS.2022.280
dc.identifier.isbn978-0-9981331-5-7
dc.identifier.urihttp://hdl.handle.net/10125/79613
dc.language.isoeng
dc.relation.ispartofProceedings of the 55th Hawaii International Conference on System Sciences
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/
dc.subjectCyber Deception and Cyberpsychology for Defense
dc.subjectcyber deception
dc.subjectenticement score
dc.subjecthoneyfiles
dc.subjectnatural language processing (nlp)
dc.subjectsemantic similarity
dc.titleTSM: Measuring the Enticement of Honeyfiles with Natural Language Processing
dc.type.dcmitext

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
0223.pdf
Size:
647.36 KB
Format:
Adobe Portable Document Format
Download

Collections

Cyber Deception and Cyberpsychology for Defense