RUS  ENG
Full version
JOURNALS // Vestnik of Astrakhan State Technical University. Series: Management, Computer Sciences and Informatics // Archive

Vestn. Astrakhan State Technical Univ. Ser. Management, Computer Sciences and Informatics, 2024 Number 4, Pages 79–88 (Mi vagtu827)

MATHEMATICAL MODELING

Using bayesian models and Monte Carlo methods to predict cyber threats

P. A. Panilov

Bauman Moscow State Technical University, Moscow, Russia

Abstract: The methods for forecasting cyber threats and risk analysis using Bayesian models and Monte Carlo methods are considered in the article. Bayesian models have the capability to account for conditional probabilities and dynamically update estimates based on incoming data, ensuring a high degree of flexibility and adaptability in threat forecasting, particularly in conditions of uncertainty and a rapidly changing cyber environment. These models enable the consideration of the interrelationships between various factors and events, significantly enhancing the accuracy of predictions. Monte Carlo methods, through multiple simulations and scenario analysis, allow for a detailed assessment of risks and the likelihood of various events. The example of a Bayesian model structure that includes key elements of cybersecurity such as firewalls, malware, data breaches, social engineering, cloud services, and external networks is presented. The results of Monte Carlo simulations reveal strong correlations between these elements. For instance, reduced firewall effectiveness increases the likelihood of malware infiltration, which, in turn, significantly raises the risk of data breaches. The success of social engineering attacks also greatly impacts the likelihood of data breaches. These identified interdependencies help in developing more precise and effective cybersecurity strategies by focusing efforts on critical nodes and potential vulnerability points. Such an approach enables cognitive security centers and cybersecurity experts to forecast threats, analyze risks, devise proactive defense measures, and make informed decisions aimed at enhancing the protection of critical infrastructure.

Keywords: cybersecurity, cyber threat forecasting, Bayesian models, Monte Carlo methods, risk analysis, data leakage, social engineering.

UDC: 004.81

Received: 04.05.2024
Accepted: 04.10.2024

DOI: 10.24143/2072-9502-2024-4-79-88



© Steklov Math. Inst. of RAS, 2024