Behavioral Profiling of Cyber Attacker

• In Event: Poster Session 1

Abstract

Introduction:
Currently, cybercriminals are launching various attacks on individuals, businesses, and public institutions. In order to prevent such attacks and minimize their impact, detection and classification methods for cybercriminals have been developed. This study focuses on several cases of cyber attacks that have occurred in Japan, analyzes the attack patterns using the ATT&CK framework, and reports on the issues related to cybercrime investigations for each incident.
Objective:
This study attempts to assess risk with facets consisting of the pattern of cyberattack.

Methods:
We will conduct TTPs analysis on ransomware attacks targeting healthcare and educational institutions in Japan using the ATT&CK framework. TTPs stands for Tactics, Techniques, and Procedures, which refers to the characteristics of cyber attackers' attack objectives and patterns. ATT&CK divides the cyber attackers' attack phases into 14 stages and reveals the details of these TTPs. As for the issues related to cybercrime investigations for these incidents, we will report based on the interview survey we conducted with the investigators.

Author

• Daiji Hario, Faculty of Business Administration, Setsunan University