2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)最新文献

A Taxonomy of Malicious Traffic for Intrusion Detection Systems 入侵检测系统中的恶意流量分类

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551386

Hanan Hindy, Elike Hodo, Ethan Bayne, A. Seeam, Robert C. Atkinson, X. Bellekens

引用次数: 13

Cyber security: Influence of patching vulnerabilities on the decision-making of hackers and analysts 网络安全:修补漏洞对黑客和分析师决策的影响

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551421

Zahid Maqbool, V. Pammi, V. Dutt

{"title":"Cyber security: Influence of patching vulnerabilities on the decision-making of hackers and analysts","authors":"Zahid Maqbool, V. Pammi, V. Dutt","doi":"10.1109/CyberSA.2018.8551421","DOIUrl":"https://doi.org/10.1109/CyberSA.2018.8551421","url":null,"abstract":"Patching of vulnerabilities on computer systems by analysts enables us to protect these systems from cyber-attacks. However, even after patching, the computer systems may still be vulnerable to cyber-attacks as the patching process may not be foolproof. Currently, little is known about how hacker’s attack actions would be influenced by the varying effectiveness of the patching process. The primary objective of this study was to investigate the influence of the patching process on the attack-and-defend decisions of hackers and analysts. In this study, we used a 2-player zero-sum stochastic Markov security game in a lab-based experiment involving participants performing as hackers and analysts. In the experiment, participants were randomly assigned to two between-subjects patching conditions: effective (N = 50) and less-effective (N = 50). In effective patching, the probability of the network to be in a non-vulnerable state was 90% after patching by the analyst; whereas, in less-effective patching, the probability of the network to be in the non-vulnerable state was 50% after patching by the analyst. Results revealed that the proportion of attack and defend actions were similar between effective and less-effective conditions. Furthermore, although the proportion of defend actions were similar between vulnerable and non-vulnerable states, the proportion of attack actions were smaller in the non-vulnerable state compared to the vulnerable state. A majority of time, both players deviated significantly from their Nash equilibria in different conditions and states. We highlight the implications of our results for patching and attack actions in computer networks.","PeriodicalId":352813,"journal":{"name":"2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116463209","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

CyberSA 2018 Invited Keynotes CyberSA 2018邀请主题演讲

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/cybersa.2018.8551451

引用次数: 0

Towards Integrating Insurance Data into Information Security Investment Decision Making 将保险数据整合到信息安全投资决策中

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551375

Daniel W. Woods, A. Simpson

引用次数: 1

Cluster analysis for deobfuscation of malware variants during ransomware attacks 在勒索软件攻击期间对恶意软件变体进行解混淆的聚类分析

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551432

A. Arrott, Arun Lakhotia, F. Leitold, Charles LeDoux

引用次数: 2

The Landscape of Industrial Control Systems (ICS) Devices on the Internet 工业控制系统(ICS)设备在互联网上的前景

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551422

W. Xu, Yaodong Tao, Xin Guan

{"title":"The Landscape of Industrial Control Systems (ICS) Devices on the Internet","authors":"W. Xu, Yaodong Tao, Xin Guan","doi":"10.1109/CyberSA.2018.8551422","DOIUrl":"https://doi.org/10.1109/CyberSA.2018.8551422","url":null,"abstract":"Industrial control systems are employed in numerous critical infrastructure assets. Originally designed for closed systems, these protocols do not have built-in security. If these systems are the target of a cyberattack, it will cause serious damage to the physical world, However, there is an increasing number of ICS devices on the Internet. In order to study the number, distribution and trend of these systems, we analyzed the Censys scanning data for the five protocols of Modbus, Siemens S7, DNP3, BACnet, Tridium Fox. We find that there are still a large number of devices exposed on the Internet, distributed in more than 100 countries around the world, and the overall number of devices has been on the rise in the last two years. Separately, in the past two years, the number of Modbus and Siemens S7 protocol continued to grow rapidly, the number of DNP3 protocol devices has declined, and the number of BACnet and Tridium Fox protocol devices has basically remained unchanged. By analyzing the IP addresses of these devices, we find that some of the devices are continually exposed to the Internet, and some of the devices are temporarily exposed. We also find some Conpot honeypot records in these data.","PeriodicalId":352813,"journal":{"name":"2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)","volume":"47 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-06-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114685926","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 13

When to Treat Security Risks with Cyber Insurance 何时用网络保险来处理安全风险

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551456

P. H. Meland, Fredrik Seehusen

引用次数: 6

Cyber Risk Economics Capability Gaps Research Strategy 网络风险经济学能力差距研究策略

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551399

Erin E. Kenneally, L. Randazzese, D. Balenson

引用次数: 6

Towards Situational Awareness of Botnet Activity in the Internet of Things 物联网中僵尸网络活动的态势感知研究

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551408

Christopher D. McDermott, Andrei V. Petrovski, Farzan Majdani

引用次数: 10

Multilayer Perceptron Neural Network for Detection of Encrypted VPN Network Traffic 基于多层感知器神经网络的VPN加密流量检测

2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA) Pub Date : 2018-06-01 DOI: 10.1109/CyberSA.2018.8551395

Shane Miller, K. Curran, T. Lunney

引用次数: 26