Risk-awareness framework for safer privacy and security behavior
The objective of this project is to develop a risk-awareness framework designed to guide users towards safer privacy and security practices. Specifically, given a user's profile, we seek to create a cyber hygiene framework that assesses the individual's cyber health risk level, predicts potential attacks that could affect them, the timeframe of the attacks, and suggests recommendations to prevent or delay these attacks. Recommendations will take the form of changes in user profiles that would decrease the success rate of potential attacks.
More precisely, the student will perform a literature review on:
- Existing attacks based on user profiles. Specifically, we focus on attacks that leverage limitations described in these profiles.
- A review of existing datasets for model training on both classification and forecasting.
- A review of existing models with a focus on risk scoring for the classification tasks and state-of-the-art techniques for forecasting.
The deliverable will include a list of all these attacks and precise definitions, existing datasets/models, gaps in existing datasets, and recommendations to fill those gaps (i.e., dataset augmentation, synthetic data generation)
Required knowledge
Cybersecurity Fundamentals:
- Understanding of core concepts, common threat vectors, and threat modelling frameworks.
Machine learning:
Risk scoring, time-series models, post-hoc explanation methods.
Programming Languages:
- Python (pandas, NumPy, scikit‑learn, PyTorch/TensorFlow...).