Proceedings of the 2015 Symposium and Bootcamp on the Science of Security最新文献_第3页

Preemptive intrusion detection: theoretical framework and real-world measurements 先发制人的入侵检测:理论框架和实际测量

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-04-21 DOI: 10.1145/2746194.2746199

Phuong Cao, Eric C. Badger, Z. Kalbarczyk, R. Iyer, A. Slagell

引用次数: 34

An integrated computer-aided cognitive task analysis method for tracing cyber-attack analysis processes 跟踪网络攻击分析过程的集成计算机辅助认知任务分析方法

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-04-21 DOI: 10.1145/2746194.2746203

Chen Zhong, J. Yen, Peng Liu, R. Erbacher, Renee Etoty, C. Garneau

{"title":"An integrated computer-aided cognitive task analysis method for tracing cyber-attack analysis processes","authors":"Chen Zhong, J. Yen, Peng Liu, R. Erbacher, Renee Etoty, C. Garneau","doi":"10.1145/2746194.2746203","DOIUrl":"https://doi.org/10.1145/2746194.2746203","url":null,"abstract":"As cyber-attacks become more sophisticated, cyber-attack analysts are required to process large amounts of network data and to reason under uncertainty with the aim of detecting cyber-attacks. Capturing and studying the fine-grained analysts' cognitive processes helps researchers gain deep understanding of how they conduct analytical reasoning and elicit their procedure knowledge and experience to further improve their performance. However, it's very challenging to conduct cognitive task analysis studies in cyber-attack analysis. To address the problem, we propose an integrated computer-aided data collection method for cognitive task analysis (CTA) which has three building blocks: a trace representation of the fine-grained cyber-attack analysis process, a computer tool supporting process tracing and a laboratory experiment for collecting traces of analysts' cognitive processes in conducting a cyber-attack analysis task. This CTA method integrates automatic capture and situated self-reports in a novel way to avoiding distracting analysts from their work and adding much extra work load. With IRB approval, we recruited thirteen full-time professional analysts and seventeen doctoral students specialized in cyber security in our experiment. We mainly employ the qualitative data analysis method to analyze the collected traces and analysts' comments. The results of the preliminary trace analysis turn out highly promising.","PeriodicalId":134331,"journal":{"name":"Proceedings of the 2015 Symposium and Bootcamp on the Science of Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-04-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130205604","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19

Understanding sanction under variable observability in a secure, collaborative environment 在一个安全、协作的环境中，理解在可变可观察性下的制裁

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-04-21 DOI: 10.1145/2746194.2746206

Hongying Du, Bennett Narron, Nirav Ajmeri, E. Berglund, J. Doyle, Munindar P. Singh

{"title":"Understanding sanction under variable observability in a secure, collaborative environment","authors":"Hongying Du, Bennett Narron, Nirav Ajmeri, E. Berglund, J. Doyle, Munindar P. Singh","doi":"10.1145/2746194.2746206","DOIUrl":"https://doi.org/10.1145/2746194.2746206","url":null,"abstract":"Norms are a promising basis for governance in secure, collaborative environments---systems in which multiple principals interact. Yet, many aspects of norm-governance remain poorly understood, inhibiting adoption in real-life collaborative systems. This work focuses on the combined effects of sanction and the observability of the sanctioner in a secure, collaborative environment. We present CARLOS, a multiagent simulation of graduate students performing research within a university lab setting, to explore these phenomena. The simulation consists of agents maintaining \"compliance\" to enforced security norms while remaining \"motivated\" as researchers. We hypothesize that (1) delayed observability of the environment would lead to greater motivation of agents to complete research tasks than immediate observability and (2) sanctioning a group for a violation would lead to greater compliance to security norms than sanctioning an individual. We find that only the latter hypothesis is supported. Group sanction is an interesting topic for future research regarding a means for norm-governance which yields significant compliance with enforced security policy at a lower cost. Our ultimate contribution is to apply social simulation as a way to explore environmental properties and policies to evaluate key transitions in outcome, as a basis for guiding further and more demanding empirical research.","PeriodicalId":134331,"journal":{"name":"Proceedings of the 2015 Symposium and Bootcamp on the Science of Security","volume":"49 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-04-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122708259","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Optimisation of data collection strategies for model-based evaluation and decision-making: poster 基于模型的评估和决策的数据收集策略的优化:海报

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-04-21 DOI: 10.1145/2746194.2746224

R. Cain, A. Moorsel

引用次数: 1

Building a security practices evaluation framework 构建安全实践评估框架

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-04-21 DOI: 10.1145/2746194.2746217

P. Morrison

引用次数: 1

Characterizing complexity of highly-configurable systems with variational call graphs: analyzing configuration options interactions complexity in function calls 用变分调用图描述高度可配置系统的复杂性:分析函数调用中的配置选项交互复杂性

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-04-21 DOI: 10.1145/2746194.2746211

G. Ferreira, Christian Kästner, J. Pfeffer, S. Apel

引用次数: 11

Towards a science of trust 走向信任的科学

Proceedings of the 2015 Symposium and Bootcamp on the Science of Security Pub Date : 2015-03-10 DOI: 10.1145/2746194.2746197

Dusko Pavlovic

引用次数: 5