TY - GEN
T1 - Who touched my mission
T2 - Workshop on Automated Decision Making for Active Cyber Defense, SafeConfig 2015
AU - Sun, Xiaoyan
AU - Singhal, Anoop
AU - Liu, Peng
N1 - Funding Information:
This work was supported by NIST 70NANB14H218, ARO W911NF-09-1-0525 (MURI), NSF CNS-1422594, and ARO W911NF-13-1-0421 (MURI).
Publisher Copyright:
© 2015 ACM.
PY - 2015/10/12
Y1 - 2015/10/12
N2 - Cyber attacks inevitably generate impacts towards relevant missions. However, concrete methods to accurately evaluate such impacts are rare. In this paper, we propose a probabilistic approach based on Bayesian networks for quantitative mission impact assessment. A System Object Dependency Graph (SODG) is first built to capture the intrusion propagation process at the low operating system level. On top of the SODG, a mission-task-asset (MTA) map can be established to associate the system objects with corresponding tasks and missions. Based on the MTA map, a Bayesian network can be constructed to leverage the collected intrusion evidence and infer the probabilities of tasks and missions being tainted. This approach is promising for effective quantitative mission impact assessment.
AB - Cyber attacks inevitably generate impacts towards relevant missions. However, concrete methods to accurately evaluate such impacts are rare. In this paper, we propose a probabilistic approach based on Bayesian networks for quantitative mission impact assessment. A System Object Dependency Graph (SODG) is first built to capture the intrusion propagation process at the low operating system level. On top of the SODG, a mission-task-asset (MTA) map can be established to associate the system objects with corresponding tasks and missions. Based on the MTA map, a Bayesian network can be constructed to leverage the collected intrusion evidence and infer the probabilities of tasks and missions being tainted. This approach is promising for effective quantitative mission impact assessment.
UR - http://www.scopus.com/inward/record.url?scp=84958668231&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84958668231&partnerID=8YFLogxK
U2 - 10.1145/2809826.2809834
DO - 10.1145/2809826.2809834
M3 - Conference contribution
AN - SCOPUS:84958668231
T3 - SafeConfig 2015 - Proceedings of the 2015 Workshop on Automated Decision Making for Active Cyber Defense
SP - 21
EP - 26
BT - SafeConfig 2015 - Proceedings of the 2015 Workshop on Automated Decision Making for Active Cyber Defense
PB - Association for Computing Machinery, Inc
Y2 - 12 October 2015
ER -