Datasets
Standard Dataset
Behavioral Drift Simulation Dataset for Insider Threat Detection in Aviation Cybersecurity

- Citation Author(s):
- Submitted by:
- Cristina Kovacs
- Last updated:
- Sat, 04/26/2025 - 15:47
- DOI:
- 10.21227/s2z2-3886
- License:
Abstract
Black Swan failures in aviation cybersecurity represent significant and unpredictable disruptions that stem from intricate interactions among behavioral drift, flaws in system design, and organizational inertia, thereby eluding conventional, pattern-based threat detection methodologies. This study presents the Black Swan Cyber Resilience Framework (BSCRF), which integrates principles of antifragility and supraresilience into the realm of cybersecurity, emphasizing adaptive learning over static defensive measures. The BSCRF is structured around four interconnected layers: Signal, Inference, Decision, and Learning, each facilitating early detection of anomalies and dynamic recalibration of risk. A proof-of-concept simulation illustrates the framework's ability to identify subtle signals through trajectories of behavioral drift and to revise risk assessments via Bayesian inference. This methodology aids in closing the divide between behavioral anomaly detection and probabilistic threat modeling, thereby providing a proactive and adaptable cybersecurity strategy for complex aviation settings.
The simulation models employee access behavior within an aviation cybersecurity context. The synthetic dataset includes:
-
10 simulated employee profiles (E101–E110).
-
Behavioral features:
-
Login times.
-
File access frequency.
-
Administrative tool usage.
-
Privilege levels.
-
Deviations from peer behavior norms.
Employee E103 is intentionally engineered to gradually diverge from normal behavioral patterns over the simulated period (e.g., increased after-hours activity, unusual file access).
This design allows the controlled testing of:
-
Baseline behavior modeling.
-
Behavioral drift detection.
-
Dynamic risk scoring using Bayesian inferenc