Functional requirements of situational awareness in computer network security

Author

Onwubiko, Cyril

Author_Institution

E-Security Group, Intell. & Security Assurance, London, UK

fYear

2009

fDate

8-11 June 2009

Firstpage

209

Lastpage

213

Abstract

The underpinning of situational awareness in computer networks is to identify adversaries, estimate impact of attacks, evaluate risks, understand situations and make sound decisions on how to protect valued assets swiftly and accurately. SA also underscores situation assessment in order to make accurate forecast in dynamic and complex environments. In this paper, situational awareness in computer network security is investigated. Functional attributes of situational awareness in computer network security are discussed: dynamism and complexity, automation, realtime processing, multisource data fusion, heterogeneity, security visualisation, decision control, risk assessment, resolution, forecasting and prediction.

Keywords

computer networks; security of data; computer network security; decision control; multisource data fusion; risk assessment; security visualisation; situational awareness; valued assets protection; Aggregates; Automation; Computer networks; Computer security; Data security; Data visualization; Information security; Intrusion detection; Monitoring; Protection; Computer Network Defence; NSSA requirements; Network Security; Situational Awareness;

fLanguage

English

Publisher

ieee

Conference_Titel

Intelligence and Security Informatics, 2009. ISI '09. IEEE International Conference on

Conference_Location

Dallas, TX

Print_ISBN

978-1-4244-4171-6

Electronic_ISBN

978-1-4244-4173-0

Type

conf

DOI

10.1109/ISI.2009.5137305

Filename

5137305