LATIDIA · Ciberseguridad

Previsión de incidentes de ciberseguridad utilizando datos geopolíticos y grandes modelos lingüísticos

arXiv: 2610.04798v1Tipo de anuncio: nuevo Resumen: La predicción de incidentes de seguridad es una tarea profunda y crítica para informar las medidas defensivas proactivas y las políticas de ciberseguro. Trabajo previo para abordar este problema principalmente u

La noticia

arXiv:2610.04798v1 Announce Type: new Abstract: Predicting security incidents is a profound task critical for informing proactive defensive measures and cyber-insurance policies. Prior work tackling this problem mainly utilized structured, manually defined features based on network measurements (e.g., protocol misconfigurations). Still, despite leading to promising performance, the network-based features may fail to capture aspects related to adversaries' motives. To fill this gap, our work leverages geopolitical data mined from public sources--which may help capture attacker motives--to forecast security incidents. Specifically, our approach relies on news articles and transcribed podcasts that are fed to large language models to automatically produce rich representations. The representations are then fed to a classifier trained to