2017 International Conference on Cyber Conflict (CyCon U.S.)最新文献

One year after Warsaw: The growing need for a NATO cyber command 华沙战争后一年:北约网络司令部的需求日益增长

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167513

Siim Alatalu

引用次数: 2

Identifying self-inflicted vulnerabilities: The operational implications of technology within U.S. combat systems 识别自身造成的漏洞:美国作战系统中技术的操作含义

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167505

Rock Stevens

引用次数: 0

Considerations for secure and resilient satellite architectures 对安全和弹性卫星架构的考虑

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167508

J. Willis, R. Mills, L. Mailloux, S. Graham

引用次数: 5

Cyber security via formal methods: A framework for implementing formal methods 通过形式化方法实现网络安全:实现形式化方法的框架

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167500

J. Rivera

引用次数: 4

Proactive identification of exploits in the wild through vulnerability mentions online 通过在线提到的漏洞在野外主动识别漏洞

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167501

Mohammed Almukaynizi, Eric Nunes, Krishna Dharaiya, M. Senguttuvan, Jana Shakarian, P. Shakarian

{"title":"Proactive identification of exploits in the wild through vulnerability mentions online","authors":"Mohammed Almukaynizi, Eric Nunes, Krishna Dharaiya, M. Senguttuvan, Jana Shakarian, P. Shakarian","doi":"10.1109/CYCONUS.2017.8167501","DOIUrl":"https://doi.org/10.1109/CYCONUS.2017.8167501","url":null,"abstract":"The number of software vulnerabilities discovered and publicly disclosed is increasing every year; however, only a small fraction of them is exploited in real-world attacks. With limitations on time and skilled resources, organizations often look at ways to identify threatened vulnerabilities for patch prioritization. In this paper, we present an exploit prediction model that predicts whether a vulnerability will be exploited. Our proposed model leverages data from a variety of online data sources (white-hat community, vulnerability researchers community, and darkweb/deepweb sites) with vulnerability mentions. Compared to the standard scoring system (CVSS base score), our model outperforms the baseline models with an F1 measure of 0.40 on the minority class (266% improvement over CVSS base score) and also achieves high True Positive Rate at low False Positive Rate (90%, 13%, respectively). The results demonstrate that the model is highly effective as an early predictor of exploits that could appear in the wild. We also present a qualitative and quantitative study regarding the increase in the likelihood of exploitation incurred when a vulnerability is mentioned in each of the data sources we examine.","PeriodicalId":259012,"journal":{"name":"2017 International Conference on Cyber Conflict (CyCon U.S.)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133979827","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 49

The control & capabilities test: How a new legal regime is shaping attribution in cyberspace 控制和能力测试:新的法律制度如何塑造网络空间的归属

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167514

P. Stockburger

引用次数: 0

Cyber terrain mission mapping: Tools and methodologies 网络地形任务映射:工具和方法

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167504

Jeffrey Guion, Mark Reith

引用次数: 7

1st Troll Battalion: Influencing military and strategic operations through cyber-personas 第一巨魔营:通过网络角色影响军事和战略行动

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167503

S. Hart, Marcus Klink

{"title":"1st Troll Battalion: Influencing military and strategic operations through cyber-personas","authors":"S. Hart, Marcus Klink","doi":"10.1109/CYCONUS.2017.8167503","DOIUrl":"https://doi.org/10.1109/CYCONUS.2017.8167503","url":null,"abstract":"The Twenty-First Century has seen the dawn of the Internet as a pervasive medium by which nearly all information flows. However, the permissive environment in which the Internet was founded fostered a community plagued by Internet trolls, individuals who deliberately post inflammatory, off-topic, or offensive material on online message boards to elicit angst, or other emotions, from their targets. Then American adversaries weaponized information using trolling, and stories of its increased use and technology to influence behavior dominated headlines over the past year. Foreign influence in cyberspace directed towards the 2016 Presidential Election demonstrates how trolling has changed the political environment in the United States. Americans are vulnerable to the influence of these foreign actors, and most troubling, some will not realize foreign intelligence services target their online activities. Adversaries leverage access through Internet trolling to shift public opinion in a new and original way by distributing politically charged narratives and suppressing the free exchange of ideas through a variety of means. By combining cyber operations, information warfare, and military intelligence with automated infrastructure in one military unit, the Troll Battalion, leaders can influence military operations by shaping adversaries' social and political environments while protecting Americans from the effects of foreign trolls. The practical application of influencing strategic and tactical outcomes via cyber-personas requires further analysis for use on the battlefield, and the protection and defense of American leaders, institutions, and persons must also be analyzed to protect Americans from information warfare.","PeriodicalId":259012,"journal":{"name":"2017 International Conference on Cyber Conflict (CyCon U.S.)","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116303638","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

A framework for cybersecurity assessments of critical port infrastructure 关键港口基础设施网络安全评估框架

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167506

D. Trimble, Jonathon Monken, Alexander F. L. Sand

{"title":"A framework for cybersecurity assessments of critical port infrastructure","authors":"D. Trimble, Jonathon Monken, Alexander F. L. Sand","doi":"10.1109/CYCONUS.2017.8167506","DOIUrl":"https://doi.org/10.1109/CYCONUS.2017.8167506","url":null,"abstract":"Nearly all global economic trade flows through the ports and a broader intermodal transit system in which supporting technology networks are often privately owned and operated. The majority of government oversight and industry cooperation focuses on physical access and the safe construction and operation of ships. The cybersecurity of critical maritime and interconnected infrastructure remains largely unregulated with minimal, if any, assessment or mitigation of cybersecurity risks. These critical infrastructure networks encompass industrial control, SCADA, and information technology systems — much of it proprietary and dependent on operational support or interdependencies in intersecting domains, from energy to transportation. While many operators of the infrastructure are concerned about cybersecurity, the complexity of their systems, interdependence with other sectors, and an outsized public interest in mitigating cyber risks against such crucial economic arteries demonstrates a compelling need for standardized frameworks for assessing cybersecurity risk in the maritime domain. Our work identifies cyber risk factors affecting maritime infrastructure, present barriers to mitigating risks, and proposes the creation of an independent public/private entity for assessing, containing, and mitigating potential risks.","PeriodicalId":259012,"journal":{"name":"2017 International Conference on Cyber Conflict (CyCon U.S.)","volume":"90 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126535665","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Solving the fiscal challenge of real-time cyber capability development: How low-cost cyber capability development can be accelerated through the use of Operations and Maintenance funds and what congress can do to help 解决实时网络能力发展的财政挑战:如何通过使用运营和维护资金加速低成本网络能力的发展，以及国会可以提供哪些帮助

2017 International Conference on Cyber Conflict (CyCon U.S.) Pub Date : 2017-11-01 DOI: 10.1109/CYCONUS.2017.8167509

Rebecca K. Lively, M. Curran

引用次数: 0