arXiv subjects

Tuomas Takko

Publications and source records attributed to Tuomas Takko.

6 recordsLinked to original sources

arXiv2024

Network Modelling in Analysing Cyber-related Graphs

In order to improve the resilience of computer infrastructure against cyber attacks and finding ways to mitigate their impact we need to understand their structure and dynamics. Here we propose a novel network-based influence spreading model to investigate event trajectories or paths in various types of attack and causal graphs, which can be directed, weighted, and / or cyclic. In case of attack graphs with acyclic paths, only self-avoiding attack chains are allowed. In the framework of our model a detailed probabilistic analysis beyond the traditional visualisation of attack graphs, based on vulnerabilities, services, and exploitabilities, can be performed. In order to demonstrate the capabilities of the model, we present three use cases with cyber-related graphs, namely two attack graphs and a causal graph. The model can be of benefit to cyber analysts in generating quantitative metrics for prioritisation, summaries, or analysis of larger graphs.

cs.SI↗

arXiv2023

Residential clustering and mobility of ethnic groups

We studied residential clustering and mobility of ethnic minorities using a theoretical framework based on null models of spatial distributions and movements of populations. Using microdata from population registers we compared the patterns of clustering amongst various socioethnic groups living in and around the capital region of Finland. Using the models we were able to connect the factors influencing intraurban migration to the spatial patterns that have been developed over time. We could also demonstrate the interrelationship of the movement and clustering with fertility. The observed clustering seems to be a combined effect of fertility and the tendency to migrate locally. The models also highlight the importance of factors like proximity to the city-centre, average neighbourhood income, and similarity of socioeconomic profiles.

physics.soc-ph↗

arXiv2023

Modelling exposure between populations using networks of mobility during Covid-19

The use of mobile phone call detail records and device location data for the calling patterns, movements, and social contacts of individuals, has proven to be valuable for devising models and understanding of their mobility and behaviour patterns. In this study we investigate weighted exposure-networks of human daily activities in the capital region of Finland as a proxy for contacts between postal code areas during the pre-pandemic year 2019 and pandemic years 2020, 2021 and early 2022. We investigate the suitability of gravity and radiation type models for reconstructing the exposure-networks based on geo-spatial and population mobility information. For this we use a mobile phone dataset of aggregated daily visits from a postal code area to cellphone grid locations, and treat it as a bipartite network to create weighted one mode projections using a weighted co-occurrence function. We fit a gravitation model and a radiation model to the averaged weekly and yearly projection networks with geo-spatial and socioeconomic variables of the postal code areas and their populations. We also consider an extended gravity type model comprising of additional postal area information such as distance via public transportation and population density. The results show that the co-occurrence of human activities, or exposure, between postal code areas follows both the gravity and radiation type interactions, once fitted to the empirical network. The effects of the pandemic beginning in 2020 can be observed as a decrease of the overall activity as well as of the exposure of the projected networks. In general, the results show that the postal code level networks changed to be more proximity weighted after the pandemic began, following the government imposed non-pharmaceutical interventions, with differences based on the geo-spatial and socioeconomic structure of the areas.

physics.soc-ph↗

arXiv2022

Knowledge mining of unstructured information: application to cyber-domain

Information on cyber-related crimes, incidents, and conflicts is abundantly available in numerous open online sources. However, processing the large volumes and streams of data is a challenging task for the analysts and experts, and entails the need for newer methods and techniques. In this article we present and implement a novel knowledge graph and knowledge mining framework for extracting the relevant information from free-form text about incidents in the cyberdomain. The framework includes a machine learning based pipeline for generating graphs of organizations, countries, industries, products and attackers with a non-technical cyber-ontology. The extracted knowledge graph is utilized to estimate the incidence of cyberattacks on a given graph configuration. We use publicly available collections of real cyber-incident reports to test the efficacy of our methods. The knowledge extraction is found to be sufficiently accurate, and the graph-based threat estimation demonstrates a level of correlation with the actual records of attacks. In practical use, an analyst utilizing the presented framework can infer additional information from the current cyber-landscape in terms of risk to various entities and propagation of the risk heuristic between industries and countries.

cs.CR↗

arXiv2021

Human-agent coordination in a group formation game

Coordination and cooperation between humans and autonomous agents in cooperative games raises interesting questions of human decision making and behaviour changes. Here we report our findings from a group formation game in a small-world network of different mixes of human and agent players, aiming to achieve connected clusters of the same colour by swapping places with neighbouring players using non-overlapping information. In the experiments the human players are incentivized by rewarding to prioritize their own cluster while the model of agents' decision making is derived from our previous experiment of purely cooperative game between human players. The experiments were performed by grouping the players in three different setups to investigate the overall effect of having cooperative autonomous agents within teams. We observe that the change in the behavior of human subjects adjusts to playing with autonomous agents by being less risk averse, while keeping the overall performance efficient by splitting the behaviour into selfish and cooperative in the two actions performed during the rounds of the game. Moreover, results from two hybrid human-agent setups suggest that the group composition affects the evolution of clusters. Our findings indicate that in purely or lesser cooperative settings, providing more control to humans could help in maximizing the overall performance of hybrid systems.

physics.soc-ph↗

arXiv2019

Group formation on a small-world: experiment and modelling

As a step towards studying human-agent collectives we conduct an online game with human participants cooperating on a network. The game is presented in the context of achieving group formation through local coordination. The players set initially to a small world network with limited information on the location of other players, coordinate their movements to arrange themselves into groups. To understand the decision making process we construct a data-driven model of agents based on probability matching. The model allows us to gather insight into the nature and degree of rationality employed by the human players. By varying the parameters in agent based simulations we are able to benchmark the human behaviour. We observe that while the players utilize the neighbourhood information in limited capacity, the perception of risk is optimal. We also find that for certain parameter ranges the agents are able to act more efficiently when compared to the human players. This approach would allow us to simulate the collective dynamics in games with agents having varying strategies playing alongside human proxies.

physics.soc-ph↗