Redirigiendo al acceso original de articulo en 15 segundos...
ARTÍCULO
TITULO

A Method for Assigning Probability Distributions in Attack Simulation Languages

Wenjun Xiong    
Simon Hacks    
Robert Lagerström    

Resumen

Cyber attacks on IT and OT systems can have severe consequences for individuals and organizations, from water or energy distribution systems to online banking services. To respond to these threats, attack simulations can be used to assess the cyber security of systems to foster a higher degree of resilience against cyber attacks; the steps taken by an attacker to compromise sensitive system assets can be traced, and a time estimate can be computed from the initial step to the compromise of assets of interest.Previously, the Meta Attack Language (MAL) was introduced as a framework to develop security-oriented domain-specific languages. It allows attack simulations on modeled systems and analyzes weaknesses related to known attacks. To produce more realistic simulation results, probability distributions can be assigned to attack steps and defenses to describe the efforts required for attackers to exploit certain attack steps. However, research on assessing such probability distributions is scarce, and we often rely on security experts to model attackers? efforts. To address this gap, we propose a method to assign probability distributions to the attack steps and defenses of MAL-based languages. We demonstrate the proposed method by assigning probability distributions to a MAL-based language. Finally, the resulting language is evaluated by modeling and simulating a known cyber attack.

 Artículos similares

       
 
Jinsheng Fan, Qiushi Luo, Yuchuan Bai, Xiaofang Liu and Renzhi Li    
The roughness of a river?s boundary significantly influences the sediment transport process and the ultimate configuration of the river?s stable cross-section. This interplay between boundary roughness and river morphology is crucial to a river?s overall... ver más
Revista: Water

 
Micah Lourdes Felix and Kwansue Jung    
Precipitation is a significant input variable required in hydrological models such as the Soil & Water Assessment Tool (SWAT). The utilization of inaccurate precipitation data can result in the poor representation of the true hydrologic conditions of... ver más
Revista: Water

 
Shrutika S. Sawant, Marco Wiedmann, Stephan Göb, Nina Holzer, Elmar W. Lang and Theresa Götz    
The success of the convolutional neural network (CNN) comes with a tremendous growth of diverse CNN structures, making it hard to deploy on limited-resource platforms. These over-sized models contain a large amount of filters in the convolutional layers,... ver más
Revista: Applied Sciences

 
Mohammed Madiafi, Jamal Ezzahar, Kamal Baraka and Abdelaziz Bouroumi    
In this paper, we propose a new neural architecture for object classification, made up from a set of competitive layers whose number and size are dynamically learned from training data using a two-step process that combines unsupervised and supervised le... ver más
Revista: Applied Sciences

 
Wenjun Xiong,Simon Hacks,Robert Lagerström     Pág. 55 - 77
Cyber attacks on IT and OT systems can have severe consequences for individuals and organizations, from water or energy distribution systems to online banking services. To respond to these threats, attack simulations can be used to assess the cyber secur... ver más