2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA)最新文献_第2页

A decision support model for situational awareness in National Cyber Operations Centers 国家网络作战中心态势感知决策支持模型

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503281

Roman Graf, Florian Skopik, Kenny Whitebloom

引用次数: 7

Enhancing cyber situation awareness for Non-Expert Users using visual analytics 使用视觉分析增强非专家用户的网络态势感知

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503278

P. Legg

{"title":"Enhancing cyber situation awareness for Non-Expert Users using visual analytics","authors":"P. Legg","doi":"10.1109/CyberSA.2016.7503278","DOIUrl":"https://doi.org/10.1109/CyberSA.2016.7503278","url":null,"abstract":"Situation awareness is often described as the perception and comprehension of the current situation, and the projection of future status. Whilst this may be understood in an organisational cybersecurity context, there is a strong case to be made for effective cybersecurity situation awareness that is tailored to the needs of the Non-Expert User (NEU). Our online usage habits are rapidly evolving with smartphones and tablets being widely used to access resources online. In order for NEUs to remain safe online, there is a need to enhance awareness and understanding of cybersecurity concerns, such as how devices may be acting online, and what data is being shared between devices. In this paper, we explore the notion of personal situation awareness for NEUs. We conduct a small-scale study to understand how NEUs perceive cybersecurity. We also propose how visual analytics could be used to help encourage NEUs to actively monitor and observe their activity for greater online awareness. The guidance developed through the course of this work can help practitioners develop tools that could help NEUs better understand their online actions, with the aim to result in safer experiences when acting online.","PeriodicalId":179031,"journal":{"name":"2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130588905","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 16

Are we managing the risk of sharing cyber situational awareness? A UK Public Sector case study 我们是否在管理共享网络态势感知的风险?英国公共部门案例研究

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503292

M. Davies, Menisha Patel

引用次数: 4

Situation aware intrusion recovery policy in WSNs 基于情景感知的wsn入侵恢复策略

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503285

Eliana Stavrou, A. Pitsillides

{"title":"Situation aware intrusion recovery policy in WSNs","authors":"Eliana Stavrou, A. Pitsillides","doi":"10.1109/CyberSA.2016.7503285","DOIUrl":"https://doi.org/10.1109/CyberSA.2016.7503285","url":null,"abstract":"Wireless Sensor Networks (WSNs) have been gaining tremendous research attention the last few years as they support a broad range of applications in the context of the Internet of Things. WSN-driven applications greatly depend on the sensors' observations to support decision-making and respond accordingly to reported critical events. In case of compromisation, it is vital to recover compromised WSN services and continue to operate as expected. To achieve an effective restoration of compromised WSN services, sensors should be equipped with the logic to take recovery decisions and self-heal. Self-healing is challenging as sensors should be aware of a variety of aspects in order to take effective decisions and maximize the recovery benefits. So far situation awareness has not been actively investigated in an intrusion recovery context. This research work formulates situation aware intrusion recovery policy design guidelines in order to drive the design of new intrusion recovery solutions that are operated by an adaptable policy. An adaptable intrusion recovery policy is presented taking into consideration the proposed design guidelines. The evaluation results demonstrate that the proposed policy can address advanced attack strategies and aid the sensors to recover the network's operation under different attack situations and intrusion recovery requirements.","PeriodicalId":179031,"journal":{"name":"2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA)","volume":"43 4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128858036","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Internet discussion forums: Maximizing choice in health-seeking behaviour during public health emergencies 互联网论坛:在突发公共卫生事件中最大限度地选择求医行为

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503283

J. Cole, D. Kleine, C. Watkins

引用次数: 6

On the collaborative practices of cyber threat intelligence analysts to develop and utilize tacit Threat and Defence Knowledge 论网络威胁情报分析员开发和利用隐性威胁与防御知识的协作实践

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503279

Jan M. Ahrend, M. Jirotka, K. Jones

{"title":"On the collaborative practices of cyber threat intelligence analysts to develop and utilize tacit Threat and Defence Knowledge","authors":"Jan M. Ahrend, M. Jirotka, K. Jones","doi":"10.1109/CyberSA.2016.7503279","DOIUrl":"https://doi.org/10.1109/CyberSA.2016.7503279","url":null,"abstract":"While the need for empirical investigations of cybersecurity analysts' collaborative work practices is widely acknowledged, research efforts are fairly limited. This paper aims to provide empirical evidence to support a deeper consideration for the seemingly intangible collaborative practices that situational awareness in cybersecurity relies on and add to our understanding of what it means to “do” threat intelligence. In particular, it aims to unpack the informal forms of collaboration and coordination at work that build tacit knowledge about threat actors and defenders and that span across time, people and tools to inform the translation of threat information into actionable threat intelligence. In-depth semi-structured interviews and diary studies are conducted at three cyber threat intelligence service providers (N=5) and analyzed using thematic analysis. This paper introduces the concept of Threat and Defence Knowledge, tacit knowledge that analysts within an organization form over time and utilize through informal ways of becoming aware of this knowledge, making it available and correlating it. We find that a lack of accessibility to knowledge about relevant threat and defence factors can reduce analysts' effectiveness at arriving at actionable threat intelligence and hence reduce the ability to be alerted in advance about cyber threats, to contain damage and obtain situational awareness. Perceived and potential shortcomings of the existing processes and tools are presented, and practices to circumvent the existing systems investigated and implications for design are considered.","PeriodicalId":179031,"journal":{"name":"2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA)","volume":"289 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122732517","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 28

Enhancing WPA2-PSK four-way handshaking after re-authentication to deal with de-authentication followed by brute-force attack a novel re-authentication protocol 对WPA2-PSK重认证后的四向握手进行增强，以应对去认证后的暴力攻击，提出了一种新的重认证协议

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503286

M. Ghanem, Deepthi N. Ratnayake

{"title":"Enhancing WPA2-PSK four-way handshaking after re-authentication to deal with de-authentication followed by brute-force attack a novel re-authentication protocol","authors":"M. Ghanem, Deepthi N. Ratnayake","doi":"10.1109/CyberSA.2016.7503286","DOIUrl":"https://doi.org/10.1109/CyberSA.2016.7503286","url":null,"abstract":"The nature of wireless network transmission and the emerging attacks are continuously creating or exploiting more vulnerabilities. Despite the fact that the security mechanisms and protocols are constantly upgraded and enhanced, the Small Office/Home Office (SOHO) environments that cannot afford a separate authentication system, and generally adopt the IEEE 802.11 Wi-Fi-Protected-Access-2/Pre-Shared-Key (WPA2-PSK) are still exposed to some attack categories such as de-authentication attacks that aim to push wireless client to re-authenticate to the Access Point (AP) and try to capture the keys exchanged during the handshake to compromise the network security. This kind of attack is impossible to detect or prevent in spite of having an Intrusion Detection and Prevention System (IDPS) installed on the client or on the AP, especially when the attack is not repetitive and is targeting only one client. This paper proposes a novel method which can mitigate and eliminate the risk of exposing the PSK to be captured during the re-authentication process by introducing a novel re-authentication protocol relying on an enhanced four-way handshake which does not require any hardware upgrade or heavy-weight cryptography affecting the network flexibility and performances.","PeriodicalId":179031,"journal":{"name":"2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA)","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129747734","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

Cyber attacks and maritime situational awareness evidence from Japan and Taiwan 来自日本和台湾的网络攻击和海上态势感知证据

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503295

J. Burton

{"title":"Cyber attacks and maritime situational awareness evidence from Japan and Taiwan","authors":"J. Burton","doi":"10.1109/CyberSA.2016.7503295","DOIUrl":"https://doi.org/10.1109/CyberSA.2016.7503295","url":null,"abstract":"This paper argues that cyber-attacks are increasingly being seen as a threat to maritime situational awareness in the Asia Pacific region, and highlights how the Japanese and Taiwanese governments have been developing both offensive and defensive cyber operations to ameliorate vulnerabilities in their naval fleets vis-a-vis their respective relationships with China. The paper begins by exploring traditional understandings of maritime situational awareness and how changes in Information and Communications Technology (ICT) have transformed the maritime strategic environment in recent decades. The paper moves on to explore how countries in the region, including China, the US, Japan and Taiwan are developing new capabilities in this area and new military doctrine to avoid disruptions to maritime operations. The final section of the paper presents a forward looking analysis of how cyber-attacks could affect military responses to territorial dispute in the South China Sea in particular, and the normative dangers of cyber militarization in the naval domain. The paper is based on field research conducted in Japan and Taiwan in 2014/15.","PeriodicalId":179031,"journal":{"name":"2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA)","volume":"2015 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-06-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127651580","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Building an effective and efficient continuous web application security program 建立一个有效和高效的持续web应用程序安全程序

2016 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (CyberSA) Pub Date : 2016-06-13 DOI: 10.1109/CyberSA.2016.7503287

Ma Bang, Himanshu Saraswat

引用次数: 4