Home

Welcome to the adversity-analysis wiki!

Aim of the Study :

Analysis and Mapping the similarities of the various spear phishing attacks in current context .

Following is the outline of the Analysis steps :

Table 1 : Descriptive Statistics of Spear Phishing attacks ecosystem S.No Analysis of What ? Description 1 Frequency Analysis of attacks In this analysis a descriptive statistical method will find the number of occurrences of each type of spear phishing attack . 2 Minimum number of attacks period This is part of frequency analysis , finding max occurrences with respect to day, week , month etc . 3 Maximum number of attacks period This is part of frequency analysis , finding minimum occurrences with respect to day, week , month etc . 4 Standard Deviation in respective periods of attacks How much do these spear phishing attacks deviate from the mean occurrence ?

5 Frequency Analysis of Target Industry , Job, Ranks , Countries What is occurrence segment wise of spear phishing attacks ? 6 Minimum number of attacks in which industry , Job , Rank , Countries In which segment (country , company , job , rank ) is occurrence of spear attacks minimum , Which country has minimum occurrence of attacks ? 7 Maximum number of attacks period in which industry , Job , Rank , Countries In which segment (country , company , job , rank ) is occurrence of spear attacks minimum , Which country has maximum occurrence of attacks ? 8 Standard Deviation of respective periods of attacks in which industry , Job , Rank , Countries How to these attack vary with respect to average number of incidents ? (Job Wise , Industry Wise , Rank Wise etc .)

Study of Modus Operandi of Spear Phishing attacks 👍

S.No Action Description 1 Type of Spear Phishing What are the different ways/methods in which the attack is executed? 2 Tools used By Attacks Which tool /Kits are used for executing the spear attacks 3 Profile of Cyber Criminals Demographic information on people who conduct these attacks , What is their education level , age , sex etc ., 4 Purpose of Attack Cyber Terrorism ,Protest , Fraud , Espionage etc, .With what aim was the spear attacks conducted .

Stylometric Analysis of Email Content used for Spear Phishing 👍

1 Spear Phishing Email Templates Types /Styles Purpose of Analysis 2 Most frequent Used Subjects, Body Lines by Attackers Find which lines allure the target victims into the trap 3 Most frequent Used Attachment types Lines by Attackers Find which kind of attachments allure the target victims into the trap 4 Unique Words /Phrases Find the dictionary/vocab size of Trap Words /Measure of vocabulary richness 5 Multiple chi-square analysis Find relation between the factors/indicators from which we can find factors from which we can detect and find hint of spear phishing attack . These will be the independent variables/ indicators /factors impacting the growth of the spear attacks . In this we take a hypothesis and try to prove it null or otherwise . 6 Burrows' Delta analysis, Text Similarity etc Analysis . It is kind of distance measure to find similarity between two text paragraphs /sentences /phrases etc . If the distance between the text is zero ., this means that the text is similar to each other .

Burrow’s delta score is also kind of distance measure to find similarity between the text .

Here , we need to categorize the spam content for doing analysis .

7 Principal Component Analysis Pictorial Representation of Words blocks To understand , lets take an example of two photos of elephants . If the object in photos are similar in nature , we will call both the objects of the images as elephants ..But , if these photos is make up words rather than objects likes elephant .., then also we can find some level pictorial similarity between set of two text sentences . The only things is these sentences need to represented as numerical features of the sentence text
9 Bigrams/Trigrams, Concordance Analysis Frequency of bigrams, trigrams , concordance words/phrases In this we will try to analysis , how do the writers of spear phishing community write their contents . How many words are typically written together (Bigram) means 2 and how many three words are written together . 10 Syntactic Analysis Noun to Verb Ratio , Adjective to verb ratio In this we will try to find how do the spear phishing content is composed in terms of syntax ? What are the ratios of verb , nouns , adverbs etc

Resources to be used in Analysis S.No Resource/Tool Resource /Tools /Tutorials 1 Delta Brown Analysis of Text https://github.com/fotis007/pydelta

2 PCA analysis of Text https://github.com/lnmaurer/StyleTool/

3 Bigrams/Trigrams, Concordance Analysis NLTK Library , Python Stylometric library 4 Statistical Analysis of Text http://nlp.stanford.edu/fsnlp/