Sharing and replaying attack scenarios with Moirai - Archive ouverte HAL Access content directly
Conference Papers Year : 2017

Sharing and replaying attack scenarios with Moirai

Abstract

Datasets are necessary for evaluating and comparing security solutions. Today, the most well-known public dataset is still the oft-decried IDEVAL dataset. Even if we don't take into account all the inherent shortcomings of this dataset, the fact that it dates back to 1999 means its relevance is all but lost. Without a public dataset, new security solutions cannot be compared to existing ones. In this article, we argue for the need of a public and modern dataset for the evaluation of security solutions. Moreover, we argue that traditional datasets are too restrictive in the approaches they allow. Thus, we present Moirai. Instead of sharing datasets, Moirai shares the scenarios used to create datasets. This allows for the creation of complex scenarios which could, for example, represent an Advanced Persistent Threat (APT). By sharing the scenarios, Moirai allows solutions based on disparate ideas to be compared.
Fichier principal
Vignette du fichier
paper.pdf (93.71 Ko) Télécharger le fichier
poster.pdf (115.18 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Origin Files produced by the author(s)

Dates and versions

hal-01533275 , version 1 (06-06-2017)

Identifiers

  • HAL Id : hal-01533275 , version 1

Cite

Guillaume Brogi, Valérie Viet Triem Tong. Sharing and replaying attack scenarios with Moirai. RESSI 2017: Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2017, Autrans, France. ⟨hal-01533275⟩
453 View
242 Download

Share

Gmail Mastodon Facebook X LinkedIn More