IMPLICIT THREATS IDENTIFICATION BASED ON ANALYSIS OF USER ACTIVITY ON THE INTERNET SPACE

Abstract

The article is devoted to the problem of identifying implicit information threats of a user's
search activity in the internet space based on an analysis of his activity in the course of this interaction.
The use of knowledge stored in the Internet space for the implementation of criminal intentions
poses a threat to the whole society. Identifying malicious intent in the users’ actions of the
global information network is not always a trivial task. The proven technologies for analyzing the
context of user interests fail in the case of cautious and competent actions of attackers who do not
explicitly demonstrate the goal they are pursuing. The paper analyzes the threats associated with
certain scenarios for the implementation of search procedures that manifest themselves in search
activities. Criteria of inefficient and effective search scenarios estimation are described. Among
the signs indicating the possibility of a threat, the following main ones are highlighted: avoiding
solving the problem in aimless navigation or attractive resources, superficial search, lack of
meaningful immersion in solving the search problem, and chaotic actions during the search.
To determine the presence of adverse signs, a system of indicators is built. The features of an effective
scenario for organizing a search in the Internet space are formulated, options for the presence
of implicit threats for a similar situation are described.An approach for identification the
described threats is presented taking into account the specified criteria for evaluating various
scenarios of user behavior in the global information space. A machine learning algorithm has
been developed to identify problem scenarios by comparing with key behavioral patterns. The
software implementation of the subsystem for identifying information threats has been created,
experimental studies have been conducted to confirm the effectiveness of the subsystem. Experimental
studies were carried out on the basis of processing open data from social networks, as well
as using analysis of user search activity in the university corporate information environment.