About the project
This PhD project automates cyber-attack attribution using AI and NLP, enhancing defence strategies against evolving cyber threats. Objectives include dynamic attacker identification, a threat intelligence dashboard, and a QA system for real-time analysis. Applicants gain expertise in malware analysis and NLP, driving impactful cybersecurity innovation for proactive threat resilience.
This PhD project aims to enhance cyber-attack attribution through automation, leveraging AI and Natural Language Processing (NLP) to streamline the attribution process and improve defence strategies. Cyber-attacks are rapidly evolving, surpassing traditional ML methods that rely heavily on past data, which can quickly become outdated. As cyber-attack attribution is crucial for strengthening organizational defences and preventing future threats, this project will investigate AI-driven solutions to address the limitations of manual analysis, which is both time-consuming and resource-intensive.
Objectives of this project include:
(1) automating the cyber-attack attribution process using AI-driven solutions;
(2) identifying attacker techniques and countermeasures dynamically;
(3) constructing a threat intelligence analysis dashboard and Question-Answering (QA) system to support real-time analyst investigation.
Applicants will gain hands-on experience in malware analysis, intrusion detection system features, and advanced NLP techniques. They will also explore how attackers adapt and evolve their methods, analyzing the origins and contexts of attacks to enhance attribution accuracy. This project will involve designing solutions that are not only technically sophisticated but also contextually aware, providing more precise and actionable cybersecurity measures.
The impact of this work is significant: an automated, AI-driven attribution system will allow organizations to respond faster and more effectively to evolving threats, enhancing their resilience and proactive defence capabilities in an increasingly complex cyber landscape. This project offers applicants a unique opportunity to drive meaningful innovation in cybersecurity.
