Title :
FuSIA: Future Situation and Impact Awareness
Author :
Holsopple, Jared ; Yang, Shanchieh Jay
Author_Institution :
Inf. Exploitation Group, CUBRC, Buffalo, NY
fDate :
June 30 2008-July 3 2008
Abstract :
Recent cyber security research has focused on providing a situation awareness of computer networks by identifying incoming attacks. FuSIA: Future Situation and Impact Awareness seeks to extend this situation awareness via estimating plausible futures of ongoing attacks. Plausible futures, derived based on current progress of attacks, are projected situations that computer security analysts may use to determine appropriate actions for proactive defense. This work discusses the generalized framework of FuSIA as well as its application in cyber intrusion projection. FuSIA adopts application specific contextual information as well as provides flexibility by accommodating multiple projection algorithms. In particular, this paper presents threat projection algorithms via analyzing capability and opportunity of ongoing attacks. Plausibility scores derived from these algorithms are then combined based on Dempster-Shafer theory to provide a final fused estimate of plausible futures.
Keywords :
computer networks; inference mechanisms; security of data; sensor fusion; telecommunication computing; telecommunication security; Dempster-Shafer theory; computer network security; computer security analysis; cyber intrusion projection; cyber security research; future situation-and-impact awareness; information fusion; plausible future; threat projection algorithm; Dempster-Shafer; computer security; threat assessment;
Conference_Titel :
Information Fusion, 2008 11th International Conference on
Conference_Location :
Cologne
Print_ISBN :
978-3-8007-3092-6
Electronic_ISBN :
978-3-00-024883-2
