The Importance of Causality in Cyber Threat Intelligence Analysis

Speaker:  Federico Cerutti – Brescia, Italy
Topic(s):  Security and Privacy


Each cyber attack is a set of chains of events linked together by time and causality: attackers’ and defenders’ actions influence each other in a complex, interconnected web of causal links. In this lecture, I expand on the concept of causality and its fundamental role in cyber threat intelligence analysis. I focus on structural causal models as a piece of computational machinery for the so-called hierarchy of causality: studying the associations between variables, modifying one and inspecting the changes in others, and imagining counterfactuals. Indeed, responding to threats require answers to questions that lie at different levels of such a hierarchy, mainly at the intervention level. With this lecture, the attendees will acquire an understanding of the fundamental concepts of causality and its paramount role in cyber security intelligence analysis.

About this Lecture

Number of Slides:  45
Duration:  60 minutes
Languages Available:  English, Italian
Last Updated: 

Request this Lecture

To request this particular lecture, please complete this online form.

Request a Tour

To request a tour with this speaker, please complete this online form.

All requests will be sent to ACM headquarters for review.