A System Dynamics Approach to Evaluate Advanced Persistent Threat Vectors

IF 0.5 Q4 COMPUTER SCIENCE, SOFTWARE ENGINEERING

International Journal of Information Security and Privacy Pub Date : 2023-06-01 DOI:10.4018/ijisp.324064

Mathew Nicho, Christopher D. McDermott, H. Fakhry, S. Girija

引用次数: 0

Abstract

Cyber-attacks targeting high-profile entities are focused, persistent, and employ common vectors with varying levels of sophistication to exploit social-technical vulnerabilities. Advanced persistent threats (APTs) deploy zero-day malware against such targets to gain entry through multiple security layers, exploiting the dynamic interplay of vulnerabilities in the target network. System dynamics (SD) offers an alternative approach to analyze non-linear, complex, and dynamic social-technical systems. This research applied SD to three high-profile APT attacks - Equifax, Carphone, and Zomato - to identify and simulate socio-technical variables leading to breaches. By modeling APTs using SD, managers can evaluate threats, predict attacks, and reduce damage by mitigating specific socio-technical cues. This study provides valuable insights into the dynamics of cyber threats, making it the first to apply SD to APTs.

查看原文本刊更多论文

一种评估高级持久威胁向量的系统动力学方法

针对知名实体的网络攻击具有针对性、持久性，并使用不同复杂程度的常见载体来利用社会技术漏洞。高级持续威胁（APT）针对此类目标部署零日恶意软件，利用目标网络中漏洞的动态相互作用，通过多个安全层进入。系统动力学（SD）提供了一种分析非线性、复杂和动态社会技术系统的替代方法。这项研究将SD应用于三种备受关注的APT攻击——Equifax、Carphone和Zomato——以识别和模拟导致漏洞的社会技术变量。通过使用SD建模APT，管理者可以评估威胁，预测攻击，并通过减轻特定的社会技术线索来减少损失。这项研究为网络威胁的动态提供了有价值的见解，使其首次将SD应用于APT。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

International Journal of Information Security and Privacy COMPUTER SCIENCE, SOFTWARE ENGINEERING-

CiteScore

2.50

自引率

0.00%

发文量

期刊介绍： As information technology and the Internet become more and more ubiquitous and pervasive in our daily lives, there is an essential need for a more thorough understanding of information security and privacy issues and concerns. The International Journal of Information Security and Privacy (IJISP) creates and fosters a forum where research in the theory and practice of information security and privacy is advanced. IJISP publishes high quality papers dealing with a wide range of issues, ranging from technical, legal, regulatory, organizational, managerial, cultural, ethical and human aspects of information security and privacy, through a balanced mix of theoretical and empirical research articles, case studies, book reviews, tutorials, and editorials. This journal encourages submission of manuscripts that present research frameworks, methods, methodologies, theory development and validation, case studies, simulation results and analysis, technological architectures, infrastructure issues in design, and implementation and maintenance of secure and privacy preserving initiatives.