STRisk: A Socio-Technical Approach to Assess Hacking Breaches Risk

TitreSTRisk: A Socio-Technical Approach to Assess Hacking Breaches Risk
Publication TypeJournal Article
Year of Publication2022
AuthorsHammouchi, H, Nejjari, N, Mezzour, G, Ghogho, M, Benbrahim, H
JournalIEEE Transactions on Dependable and Secure Computing
Mots-clésBlogs, Cybe risk assessment, Cybe risk prediction, Data breach, Forecasting, Hacking breach, Learning systems, Malware, Noise measurements, Personal computing, Predictive models, Risk assessment, Risk predictions, Risks assessments, Security, Social networking (online)

Data breaches have begun to take on new dimensions and their prediction is becoming of great importance to organizations. Prior work has addressed this issue mainly from a technical perspective and neglected other interfering aspects such as the social media dimension. To fill this gap, we propose a STRisk predictive system where we expand the scope of the prediction task by bringing into play the social media dimension. We study over 3800 US organizations including both victim and non-victim organizations. For each organization, we design a profile composed of a variety of externally measured technical indicators and social factors. In addition, to account for unreported incidents, we consider the non-victim sample to be noisy and propose a noise correction approach to correct mislabeled organizations. We then build several machine learning models to predict whether an organization is exposed to experience a hacking breach. By exploiting both technical and social features, we achieve an Area Under Curve (AUC) score exceeding 98%, which is 12% higher than the AUC achieved using only technical features. Furthermore, our feature importance analysis reveals that open ports and expired certificates are the best technical predictors, while spreadability and agreeability are the best social predictors. IEEE




Suivez-nous sur





Avenue Mohammed Ben Abdallah Regragui, Madinat Al Irfane, BP 713, Agdal Rabat, Maroc

  Télécopie : (+212) 5 37 68 60 78

  Secrétariat de direction : 06 61 48 10 97

        Secrétariat général : 06 61 34 09 27

        Service des affaires financières : 06 61 44 76 79

        Service des affaires estudiantines : 06 62 77 10 17 /

        Résidences : 06 61 82 89 77



Education - This is a contributing Drupal Theme
Design by WeebPal.