Development of a Decision Support System Based on Bayesian Networks to Improve the Effectiveness of Detecting Intrusions into Computer Systems

Abstract

Investigating complex cybercrimes, including organizing or participating in DDoS attacks, is becoming increasingly important intoday’s world that relies on information technology and computer systems in various fields of activity. Our study substantiates the feasibility of using the potential of Bayesian network models (or Bayesian networks BN) for the analysis of cybercrimes, using the example of DDoS attacks, which allow to take into account many variables and probabilities in such crimes, for example, when teaching students in specialties related to information security (IS). The study of such models will help to perform forensic analysis more deeply, based on clear mathematical dependencies and eliminate subjectivity. The proposed model develops the work of other authors and helps to identify connections in the BN in more detail. A description of the software implementation in Python of such a training program based on BN is proposed. This software product is aimed at increasing the effectiveness of such tools, making them more practice oriented and expanding opportunities for both students and specialists to analyze cybercrimes related to DDoS attacks.