Spring, JM;
(2014)
A notation for describing the steps in indicator expansion.
In:
2013 APWG eCrime Researchers Summit.
IEEE
Preview |
Text
spring_2013_indicator-expansion-notation.pdf - Published Version Download (275kB) | Preview |
Abstract
Indicator expansion is a process of using one or more data sources to obtain more indicators of malicious activity by identifying those related to currently known indicators. Due to the many variables in how the process is carried out, it quickly becomes difficult to capture the process that leads to an expanded set of data. Keeping track of this process is important for description to other analysts. A compact description of the process is even necessary just for the analysts doing the work to keep track of their own process and which paths have been investigated, particularly in naming files. This paper proposes a method of succinctly capturing the process of indicator expansion in a deterministic yet flexible and extensible manner. The target audience is analysts and investigators engaged in indicator expansion or directly consuming results therefrom.
| Type: | Proceedings paper |
|---|---|
| Title: | A notation for describing the steps in indicator expansion |
| Event: | 2013 APWG eCrime Researchers Summit, San Francisco, 17-18 September 2013, California, USA |
| Location: | San Francisco, CA, USA |
| Dates: | 17 September 2013 - 18 September 2013 |
| ISBN-13: | 9781479911592 |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1109/eCRS.2013.6805774 |
| Publisher version: | https://doi.org/10.1109/eCRS.2013.6805774 |
| Language: | English |
| Additional information: | This version is the author accepted manuscript. For information on re-use, please refer to the publisher’s terms and conditions. |
| Keywords: | Target tracking, Springs |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery.ucl.ac.uk/id/eprint/10037803 |
Archive Staff Only
 |
View Item |
