{'fraction_non_alphanumeric': 0.02030456852791878, 'fraction_numerical': 0.0038071065989847717, 'mean_word_length': 4.717391304347826, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
1 DETECTING A CYBERATTACK SOURCE IN REAL TIME

Introduction The ability to determine the source of a cyber-attack is very helpful in stopping such attacks. If this ability were well developed, it would act as a deterrent against such attacks since accurate knowledge of the source of such attacks can be used for legal, criminal, economic or military sanctions [1]. The process of tracing an attack back to its source may also uncover useful details that would help develop effective countermeasures against similar attacks in the future. It might even enable one to interrupt an attack in progress. In most cases, the ability to deter, prevent or interrupt a cyber-attack is of greater value to society than assigning blame and trying to collect damages after an attack has occurred [2].