A pyramidal-based model to compute the impact of cyber security events - Archive ouverte HAL
Communication Dans Un Congrès Année : 2018

A pyramidal-based model to compute the impact of cyber security events

Résumé

This paper presents a geometrical model that projects malicious and benign events (e.g.,attacks, security countermeasures) as pyramidal instances in a multidimensional coordinate system. The approach considers internal event data related to the target system (e.g.,users, physical, and logical resources, IP addresses, port numbers, etc.), and external event data related to the attacker (e.g.,knowledge, motivation, skills, etc.) that can be obtained a priori and a posteriori. Internal data is used to model the base of the pyramid, whereas external data is used to model its heigh. In addition, the approach considers state transitions taken by the attacker to model the steps of a multi-stage attack to reach to its final goal. A a result, for each modeled state, new countermeasures are evaluated and the attacker's knowledge a posteriori changes accordingly, making it possible to evaluate the impact of the attack at time Ti, where i denotes the stage at which the attack is executed. A graphical representation of the impact of each evaluated even is depicted for visualization purposes. A use case of a cyber-physical system is proposed at the end of the paper to illustrate the applicability of the proposed geometrical model
Fichier non déposé

Dates et versions

hal-01885053 , version 1 (01-10-2018)

Identifiants

Citer

Gustavo Daniel Gonzalez Granadillo, Jose Rubio-Hernan, Joaquin Garcia-Alfaro. A pyramidal-based model to compute the impact of cyber security events. ARES 2018 : 13th International Conference on Availability, Reliability and Security, Aug 2018, Hamburg, Germany. pp.Article n° 19 -, ⟨10.1145/3230833.3230847⟩. ⟨hal-01885053⟩
29 Consultations
0 Téléchargements

Altmetric

Partager

More