A Continuous Time List Capture Model for Internet Threats
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This white paper was published at the Joint Statistical Meetings (JSM) Conference on August 4, 2010.
To study rapidly evolving populations of Internet threats under views from multiple watch lists, we propose a hierarchical Bayesian model we call Continuous-Time List Capture (CTLC). Methodologically, CTLC is related to survival analysis under competing risks, in which individuals under study admit as many survival curves as there are sources of watch-list data. We suggest a Weibull model for the lifetime of a file from birth to appearance on a watch list, and we propose a Markov-Chain Monte Carlo method for simultaneous estimation of birth times for individuals, Weibull rate parameters for lists, and the effects of heterogeneity in behavior or traits among lists and individuals.
We describe a population study of unique malware files under the CTLC framework and present a preliminary simulation study as well as future work.
Cite This SEI Report
Weaver, R. (2010, August 4). A Continuous Time List Capture Model for Internet Threats. Retrieved September 12, 2026, from https://www.sei.cmu.edu/library/a-continuous-time-list-capture-model-for-internet-threats/.
@techreport{weaver_2010,
author={Weaver, Rhiannon},
title={A Continuous Time List Capture Model for Internet Threats},
month={Aug},
year={2010},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/a-continuous-time-list-capture-model-for-internet-threats/},
note={Accessed: 2026-Sep-12}
}
Weaver, Rhiannon. "A Continuous Time List Capture Model for Internet Threats." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, August 4, 2010. https://www.sei.cmu.edu/library/a-continuous-time-list-capture-model-for-internet-threats/.
R. Weaver, "A Continuous Time List Capture Model for Internet Threats," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 4-Aug-2010 [Online]. Available: https://www.sei.cmu.edu/library/a-continuous-time-list-capture-model-for-internet-threats/. [Accessed: 12-Sep-2026].
Weaver, Rhiannon. "A Continuous Time List Capture Model for Internet Threats." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 4 Aug. 2010. https://www.sei.cmu.edu/library/a-continuous-time-list-capture-model-for-internet-threats/. Accessed 12 Sep. 2026.
Weaver, Rhiannon. A Continuous Time List Capture Model for Internet Threats. Software Engineering Institute. 2010. https://www.sei.cmu.edu/library/a-continuous-time-list-capture-model-for-internet-threats/
This content was created for a conference series or symposium and does not necessarily reflect the positions and views of the Software Engineering Institute.