Towards improving explainability, resilience and performance of cybersecurity analysis of 5G/IoT networks (work-in-progress paper)
Résumé
In this article we present a study of some of the best-known techniques of cyber resilience. We consider a broad definition of resilience as the ability of a system to continue to function even in the presence of attacks or intrusions. Our objective is to define techniques based on resilience in order to obtain systems that work even in degraded mode. According to the state of the art, many techniques and tools have been designed for the detection of intrusions and attacks, but very few to guarantee the robustness of the system. In this paper we try to present some of these techniques that served as the basis for work that we developed on smart infrastructures. In our work we combine monitoring with resilience techniques, allowing the former to detect intrusions and attacks and the latter to develop protection measures. Our approach to resilience is based on self-healing and reflection, incorporating certain aspects of techniques such as moving target defense [39]. CCS Concepts: • Security and privacy → Intrusion/anomaly detection and malware mitigation;
Domaines
Informatique [cs]Origine | Fichiers produits par l'(les) auteur(s) |
---|