Data Driven Cyber Security Incident Prediction for IT SMEs (DaSIPreS)

虽然大部分资讯科技中小型企业(“中小企”)都知道网络安全风险，并急切希望在日常决策和计划的网络安全投资中优先处理这些风险，但由于网络威胁环境不断转变，加上新的攻击不断出现，要应付网络安全挑战对他们来说可能并不容易。此外，很多IT中小企业通常资源有限，缺乏网络安全专业知识。数据驱动的中小企业网络安全事件预测(DaSIPreS)项目旨在通过提供低成本的网络安全产品和服务来帮助IT中小企业解决所指出的问题，该产品和服务得到超越网络要素的学术创新解决方案的支持。特别是，它概述了不断变化的网络威胁格局，评估了公司当前的网络安全态势，预测了潜在的入侵，并针对IT中小企业的活动、目标和偏好定制了防御措施。DaSIPreS解决方案对于没有网络安全部门或网络安全专职人员的IT中小企业来说应该是负担得起的。这是通过集成现有的开源网络威胁情报工具来实现的，包括由项目组成员开发的工具。

While most of the Information Technology Small-Medium Enterprises (IT SMEs) are aware of cyber security risks and eager to prioritise them in their day-to-day decisions and planned cyber security investments, it might not always be easy for them to deal with cyber security challenges due to the constantly changing cyber threat landscape and new attacks appearing regularly. Moreover, there are usually limited resources and lack of cyber security expertise in many IT SMEs.The Data-Driven Cyber Security Incident Prediction for IT SMEs (DaSIPreS) project aims to help IT SMEs to tackle the indicated problem by providing a low-cost cyber security product and service supported by the academic innovative solution that goes beyond cyber essentials. In particular, it overviews the all-the-time changing cyber threat landscape, evaluates the company's current cyber security posture, predicts potential breaches and tailors defence to the IT SME's activity, goals and preferences. The DaSIPreS solution should be affordable for IT SMEs with no cyber security department or cyber security dedicated staff. This is achieved by integrating existing open-source cyber threat intelligence tools, including ones developed by the project team members.