检索结果-南通市图书馆

ASSERT:attack synthesis and separation with entropy redistribution towards predictive cyber defense

Cybersecurity 2019年第1期2卷 253-270页

作者： Ahmet Okutan shanchieh jay yang Computer Engineering Rochester Institute of TechnologyRochesterNYUSA

The sophistication of cyberattacks penetrating into enterprise networks has called for predictive defense beyond intrusion detection,where different attack strategies can be analyzed and used to anticipate next malicious actions,especially the unusual ***,traditional predictive analytics or machine learning techniques that require training data of known attack strategies are not practical,given the scarcity of representative data and the evolving nature of *** paper describes the design and evaluation of a novel automated system,ASSERT,which continuously synthesizes and separates cyberattack behavior models to enable better prediction of future *** takes streaming malicious event evidences as inputs,abstracts them to edge-based behavior aggregates,and associates the edges to attack models,where each represents a unique and collective attack *** follows a dynamic Bayesian-based model generation approach to determine when a new attack behavior is present,and creates new attack models by maximizing a cluster validity *** generates empirical attack models by separating evidences and use the generated models to predict unseen future *** continuously evaluates the quality of the model separation and triggers a re-clustering process when *** the use of 2017 National Collegiate Penetration Testing Competition data,this work demonstrates the effectiveness of ASSERT in terms of the quality of the generated empirical models and the predictability of future actions using the models.

关键词： Cyber security Dynamic bayesian classifier Clustering KL divergence

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Forecasting cyberattacks with incomplete,imbalanced,and insignificant data

引用

Cybersecurity 2018年第1期1卷 263-278页

作者： Ahmet Okutan Gordon Werner shanchieh jay yang Katie McConky Computer Engineering Rochester Institute of TechnologyRochesterNYUSA Industrial&Systems Engineering Rochester Institute of TechnologyRochesterNYUSA

Having the ability to forecast cyberattacks before they happen will unquestionably change the landscape of cyber warfare and cyber *** work predicts specific types of attacks on a potential victim network before the actual malicious actions take *** challenge to forecasting cyberattacks is to extract relevant and reliable signals to treat sporadic and seemingly random acts of *** paper builds on multi-faceted machine learning solutions and develops an integrated system to transform large volumes of public data to aggregate signals with imputation that are relevant and predictive of cyber incidents.A comprehensive analysis of the individual parts and the integrated whole demonstrates the effectiveness and trade-offs of the proposed *** 16-months of reported cyber incidents by an anonymized victim organization,the integrated approach achieves up to 87%,90%,and 96% AUC for forecasting endpoint-malware,malicious-destination,and malicious-email attacks,*** assessed month-by-month,the proposed approach shows robustness to perform consistently well,achieving F-Measure between 0.6 and *** framework also enables an examination of which unconventional signals are meaningful for cyberattack forecasting.

关键词： Cyber security Forecasting Unconventional signals

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：