Sciweavers

Share
ISI
2008
Springer

Intrusion activity projection for cyber situational awareness

8 years 2 months ago
Intrusion activity projection for cyber situational awareness
Previous works in the area of network security have emphasized the creation of Intrusion Detection Systems (IDSs) to flag malicious network traffic and computer usage. Raw IDS data may be correlated and form attack tracks, each of which consists of ordered collections of alerts belonging to a single multi-stage attack. Assessing an attack track in its early stage may reveal the attacker's capability and behavior trends, leading to projections of future intrusion activities. Behavior trends are captured via Variable Length Markov Models (VLMM) without predetermined attack plans. A virtual terrain schema is developed to model network and system configurations, and used to estimate critical elements and vulnerabilities exposed to each attacker given his/her progress. Experimental results show promises for these proactive measures in ensuring continuous and critical cyber operations.
S. J. Yang, S. Byers, J. Holsopple, B. Argauer, D.
Added 12 Dec 2010
Updated 12 Dec 2010
Type Journal
Year 2008
Where ISI
Authors S. J. Yang, S. Byers, J. Holsopple, B. Argauer, D. Fava
Comments (0)
books