4 ms·
A Modular Approach to Automatic Cyber Threat Attribution Using Opinion Pools
- jruohonen 3y agoWhile a similar idea has already been proposed, the issue with consensus algorithms particularly in this context is that attribution is also a political act (or about diplomacy, politely), and politics and hypocrisy are related, as we know, and hence you must return to the zero-trust idiom. Ref.: https://news.ycombinator.com/item?id=39113558 https://news.ycombinator.com/item?id=39113558
- Reubend 3y agoWhile this might improve the possibility of a "true positive" correct attribution, wouldn't it also increase the possibility of a "false positive" incorrect attribution? Taking data from numerous sources probably help to attribute the malware to someone, but I could imagine a motivated actor putting some dummy code in their binaries just to trip some of the detectors.