Understanding DDoS Cyber-Attacks using Social Media Analytics
By Kumar Sumeet, Kathleen Carley
2016 IEEE Conference on Intelligence and Security Informatics (ISI) | September 2016
Citation
Sumeet, Kumar., Carley, Kathleen. Understanding DDoS Cyber-Attacks using Social Media Analytics 2016 IEEE Conference on Intelligence and Security Informatics (ISI) .
Copyright
2016 IEEE Conference on Intelligence and Security Informatics (ISI), 2016
Share:
Abstract
Cyber-attacks are cheap, easy to conduct and often pose little risk in terms of attribution, but their impact could be lasting. The low attribution is because tracing cyber-attacks is primitive in the current network architecture. Moreover, even when attribution is known, the absence of enforcement provisions in international law makes cyber attacks tough to litigate, and hence attribution is hardly a deterrent. Rather than attributing attacks, we can re-look at cyber-attacks as societal events associated with social, political, economic and cultural (SPEC) motivations. Because it is possible to observe SPEC motives on the internet, social media data could be valuable in understanding cyber attacks. In this research, we use sentiment in Twitter posts to observe country-to-country perceptions, and Arbor Networks data to build ground truth of country-to-country DDoS cyber-attacks. Using this dataset, this research makes three important contributions: a) We evaluate the impact of heightened sentiments towards a country on the trend of cyber-attacks received by the country. We find that, for some countries, the probability of attacks increases by up to 27% while experiencing negative sentiments from other nations. b) Using cyber-attacks trend and sentiments trend, we build a decision tree model to find attacks that could be related to extreme sentiments. c) To verify our model, we describe three examples in which cyber-attacks follow increased tension between nations, as perceived in social media.

Sumeet Kumar is an Assistant Professor of Information Systems at the Indian School of Business (ISB). He studies problems at the intersection of technology and society. He is interested in analysing user behaviour, quantifying polarisation on online forums , and finding advertisements disguised as regular content on online platforms. His current focus is on identifying implicit or hidden advertisements in videos posted on children’s platforms such as YouTube Kids.

Additionally, Professor Kumar has conducted research in software design and development, with particular emphasis on user experience. He has investigated the use of mobile phone sensors during emergencies to improve situational awareness. His study on the Wireless Emergency Alerts (WEA) service in the United States addressed several issues of critical importance to emergency alerts effectiveness and adoption. Notably, some of his research recommendations was included in the US Federal Communications Commission (FCC) proposed changes to WEA.

He completed his undergraduate education at Indian Institute of Technology (IIT) Kanpur. He holds two Master’s degrees—in Software Engineering and in Machine Learning--both from Carnegie Mellon University, where he also earned his doctorate degree.

Sumeet Kumar
Sumeet Kumar