Behaviour-Centric Cybersecurity

Lashkari博士的CRC研究计划将定义一个基本的网络安全异常检测模型，该模型基于对良性用户的常见行为模式的分析，并与已知的敌对威胁进行对比。该计划将创建一个先进的模型来检测已知和未知的威胁，以及零日攻击；通过设计和开发通用用户配置文件（UUP）和通用异常配置文件（UAP），实现通用异常检测。随着这一综合基础模型的发展，该计划将发布理解网络安全系列（UCS），作为提高公众对网络安全的认识和理解以及对该主题熟悉程度不同的所有用户的新平台。该平台有两个组成部分：学术和技术部分，以及公共非技术部分。学术和技术部分的读者主要包括学术学者、高级教育工作者、大专学生、研究人员和开发人员、企业决策者、行业专业人士、政府立法者和法律从业人员。非技术部分将针对最广泛的读者群，包括青年、老年人、非专业人士和一般公众。将通过社会网络和其他联机通讯渠道分发和推广研究成果，促进对这些简化材料的认识和获取。解决技术解决方案以检测异常行为的需求和提高公众意识以鼓励更好的网络安全知识和实践，将支持我们在网络安全方面的集体社会责任。

Dr. Lashkari's CRC research program will define a fundamental anomaly detection model for cybersecurity based on an analysis of common behavioural patterns of benign users contrasted with those of known adversarial threats. This program will create an advanced model of detecting known and unknown threats, and zero-day attacks; the Universal Anomaly Detection (UAD) by designing and developing a Universal User Profile (UUP) and a Universal Anomaly profile (UAP). In conjunction with the development of this comprehensive fundamental model, this program will release an Understanding Cybersecurity Series (UCS) as a new platform for increasing public awareness and understanding of cybersecurity and for all users with varied levels of familiarity with the topic. This platform has two components: an academic and technical component, and a public non-technical component. The academic and technical component will target a readership primarily consisting of academic scholars, advanced educators, post-secondary students, researchers and developers, corporate decision-makers, industry professionals, government legislators and legal practitioners. The non-technical component will target the widest readership audience, including youth, seniors, laypeople, and the general public. Awareness of, and access to, these simplified materials will be facilitated via the distribution and promotion of research findings through social networks and other online communication channels. Addressing both the need for technical solutions to detect anomalous behaviour and increased public awareness to encourage better cybersecurity knowledge and practices will support our collective social responsibility for cybersecurity.