Using HMM for Intent Recognition in Cyber Security Situation Awareness

Cyber security situation awareness is a new focus of information security. Its main functions include identifying the security status of cyberspace and understanding potential intrusion activities. To understand the potential intrusion activities, much work has focused on the prediction of concrete network attacks. However, we think the intents behind network attacks are more important and more meaningful. Consequently, we discuss the intent recognition problem in cyber security situation awareness here. In this paper, we first introduce some related work and conceptions. Then we present some background of hidden Markov models. Finally we demonstrate our intent recognition approach based on hidden Markov models, and a simulation example is simply analyzed in the end.