Stateful RORI-based countermeasure selection using hypergraphs - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Journal of information security and applications Année : 2020

Stateful RORI-based countermeasure selection using hypergraphs

Résumé

Cost-sensitive metrics have been widely used during the past years as financial metrics that quantify the monetary costs and benefits of security investments, assess risks, and select countermeasures accordingly. However, due to the complexity of current attacks, and the level of dynamicity required in the estimation of the parameters composing the metrics, the use of a novel approach that considers restrictions, inter-dependency, as well as, the previous and current state at which the system is exposed to, is required. We propose in this article a Stateful Return on Response Investment (denoted by StRORI) that uses hypergraphs to model actions that have been previously deployed (e.g., at state ST0) while the current state of the system (e.g., ST1) is under analysis. As a result, StRORI is a dynamic tool that considers the changes of the system in terms of number of active devices, previously deployed countermeasures, the cost of adding a new countermeasure or suppressing a previously deployed one, and the effectiveness of a group of security measures due to the implementation of a given action. A case study is presented about the integration of the StRORI index with hypergraph models to assess countermeasures against cyber attacks.
Fichier non déposé

Dates et versions

hal-03125762 , version 1 (29-01-2021)

Identifiants

Citer

Gustavo Gonzalez-Granadillo, Elena Doynikova, Joaquin Garcia‐alfaro, Igor Kotenko, Andrey Fedorchenko. Stateful RORI-based countermeasure selection using hypergraphs. Journal of information security and applications, 2020, 54, pp.102562:1-102562:14. ⟨10.1016/j.jisa.2020.102562⟩. ⟨hal-03125762⟩
14 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More