Standard

Application of the Metric Learning for Security Incident Playbook Recommendation. / Kraeva, Irina; Yakhyaeva, Gulnara.

2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings. IEEE Computer Society, 2021. стр. 475-479 9507632 (International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM; Том 2021-June).

Результаты исследований: Публикации в книгах, отчётах, сборниках, трудах конференцийстатья в сборнике материалов конференциинаучнаяРецензирование

Harvard

Kraeva, I & Yakhyaeva, G 2021, Application of the Metric Learning for Security Incident Playbook Recommendation. в 2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings., 9507632, International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM, Том. 2021-June, IEEE Computer Society, стр. 475-479, 22nd IEEE International Conference of Young Professionals in Electron Devices and Materials, EDM 2021, Aya, Altai Region, Российская Федерация, 30.06.2021. https://doi.org/10.1109/EDM52169.2021.9507632

APA

Kraeva, I., & Yakhyaeva, G. (2021). Application of the Metric Learning for Security Incident Playbook Recommendation. в 2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings (стр. 475-479). [9507632] (International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM; Том 2021-June). IEEE Computer Society. https://doi.org/10.1109/EDM52169.2021.9507632

Vancouver

Kraeva I, Yakhyaeva G. Application of the Metric Learning for Security Incident Playbook Recommendation. в 2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings. IEEE Computer Society. 2021. стр. 475-479. 9507632. (International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM). doi: 10.1109/EDM52169.2021.9507632

Author

Kraeva, Irina ; Yakhyaeva, Gulnara. / Application of the Metric Learning for Security Incident Playbook Recommendation. 2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings. IEEE Computer Society, 2021. стр. 475-479 (International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM).

BibTeX

@inproceedings{332e47f871c2494f923616eb89124d06,
title = "Application of the Metric Learning for Security Incident Playbook Recommendation",
abstract = "The article describes an algorithm for the automated selection of the most relevant playbook for responding to computer security precedents. The proposed approach is based on the methodology of metric learning. During the execution of the algorithm, it analyzes the precedents recorded in the past and the playbooks used for them. A trained neural network maps the entire set of precedents into a vector space, in which precedents with the same playbooks are closer to each other than to precedents with different playbooks. This method does not require the involvement of object domain experts and additional training of the network when expanding the set of precedents or playbooks. The developed approach was tested on real data. Experiments show that the proposed method can be effectively used to playbook's recommendation.",
keywords = "case-based reasoning, cybersecurity incident, cybersecurity playbook, metric learning, multi-label classification, neural network",
author = "Irina Kraeva and Gulnara Yakhyaeva",
note = "Funding Information: The research was funded by RFBR and Novosibirsk region, project number 20-47-540005 Publisher Copyright: {\textcopyright} 2021 IEEE.; 22nd IEEE International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 ; Conference date: 30-06-2021 Through 04-07-2021",
year = "2021",
month = jun,
day = "30",
doi = "10.1109/EDM52169.2021.9507632",
language = "English",
series = "International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM",
publisher = "IEEE Computer Society",
pages = "475--479",
booktitle = "2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings",
address = "United States",

}

RIS

TY - GEN

T1 - Application of the Metric Learning for Security Incident Playbook Recommendation

AU - Kraeva, Irina

AU - Yakhyaeva, Gulnara

N1 - Funding Information: The research was funded by RFBR and Novosibirsk region, project number 20-47-540005 Publisher Copyright: © 2021 IEEE.

PY - 2021/6/30

Y1 - 2021/6/30

N2 - The article describes an algorithm for the automated selection of the most relevant playbook for responding to computer security precedents. The proposed approach is based on the methodology of metric learning. During the execution of the algorithm, it analyzes the precedents recorded in the past and the playbooks used for them. A trained neural network maps the entire set of precedents into a vector space, in which precedents with the same playbooks are closer to each other than to precedents with different playbooks. This method does not require the involvement of object domain experts and additional training of the network when expanding the set of precedents or playbooks. The developed approach was tested on real data. Experiments show that the proposed method can be effectively used to playbook's recommendation.

AB - The article describes an algorithm for the automated selection of the most relevant playbook for responding to computer security precedents. The proposed approach is based on the methodology of metric learning. During the execution of the algorithm, it analyzes the precedents recorded in the past and the playbooks used for them. A trained neural network maps the entire set of precedents into a vector space, in which precedents with the same playbooks are closer to each other than to precedents with different playbooks. This method does not require the involvement of object domain experts and additional training of the network when expanding the set of precedents or playbooks. The developed approach was tested on real data. Experiments show that the proposed method can be effectively used to playbook's recommendation.

KW - case-based reasoning

KW - cybersecurity incident

KW - cybersecurity playbook

KW - metric learning

KW - multi-label classification

KW - neural network

UR - http://www.scopus.com/inward/record.url?scp=85113582620&partnerID=8YFLogxK

U2 - 10.1109/EDM52169.2021.9507632

DO - 10.1109/EDM52169.2021.9507632

M3 - Conference contribution

AN - SCOPUS:85113582620

T3 - International Conference of Young Specialists on Micro/Nanotechnologies and Electron Devices, EDM

SP - 475

EP - 479

BT - 2021 IEEE 22nd International Conference of Young Professionals in Electron Devices and Materials, EDM 2021 - Proceedings

PB - IEEE Computer Society

T2 - 22nd IEEE International Conference of Young Professionals in Electron Devices and Materials, EDM 2021

Y2 - 30 June 2021 through 4 July 2021

ER -

ID: 34109588