Threat actor group profiling

Understanding the current panorama of threat actor groups worldwide is critical to building efficient cybersecurity programs. Information about threat actor groups’ motivations, tools, tactics and techniques they use to attack, and the type of targets they have in their sights provide valuable information to cybersecurity teams. To achieve this goal is essential to generate intelligence processing such information. Unfortunately, humans cannot process the amount of data generated daily, so implementing machine learning models is required for data processing and categorizing threat actor groups. With the proper profiling of threat actor groups, cybersecurity teams will strengthen their policies, security controls and processes, efficiently targeting their resources to threats that could impact them instead of wasting resources on pointless activities.

Faculty Supervisor:

Charlie Obimbo

Student:

Partner:

eSentire

Discipline:

Computer science

Sector:

Cyber Security; Information and Communications Technology; Technology

University:

University of Guelph

Program: