Paper

Attacker Behaviour Profiling using Stochastic Ensemble of Hidden Markov Models

According to the authors, this work proposes a framework for modeling attacker behavior to better predict future actions using a novel semi-supervised algorithm called Fusion Hidden Markov Model (FHMM). Experiments were conducted on real attack data captured from a Cowrie honeypot system, comparing FHMM's performance against Markov Chains, traditional HMMs, and deep recurrent neural network architectures.

HoneypotNetwork

What we know

According to the authors, this work proposes a framework for modeling attacker behavior to better predict future actions using a novel semi-supervised algorithm called Fusion Hidden Markov Model (FHMM). Experiments were conducted on real attack data captured from a Cowrie honeypot system, comparing FHMM's performance against Markov Chains, traditional HMMs, and deep recurrent neural network architectures.

Evidence limits

This entry is based only on the publicly available title and abstract; the full text has not been reviewed and the reported performance has not been independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Attacker Behaviour Profiling using Stochastic Ensemble of Hidden Markov Models
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX