Real-time cyberspace situational awareness is critical for securing and protecting today's enterprise networks from various cyber threats. When a security incident occurs, network administrators and security analysts need to know what exactly has happened in the network, why it happened, and what actions or countermeasures should be taken to quickly mitigate the potential impacts. In this paper, we propose an integrated cyberspace situational awareness system for efficient cyber attack detection, analysis and mitigation in large-scale enterprise networks. Essentially, a cyberspace common operational picture will be developed, which is a multi-layer graphical model and can efficiently capture and represent the statuses, relationships, and interdependencies of various entities and elements within and among different levels of a network. Once shared among authorized users, this cyberspace common operational picture can provide an integrated view of the logical, physical, and cyber domains, and a unique visualization of disparate data sets to support decision makers. In addition, advanced analyses, such as Bayesian Network analysis, will be explored to address the information uncertainty, dynamic and complex cyber attack detection, and optimal impact mitigation issues. All the developed technologies will be further integrated into an automatic software toolkit to achieve near real-time cyberspace situational awareness and impact mitigation in large-scale computer networks.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Integrated situational awareness for cyber attack detection, analysis, and mitigation


    Beteiligte:
    Cheng, Yi (Autor:in) / Sagduyu, Yalin (Autor:in) / Deng, Julia (Autor:in) / Li, Jason (Autor:in) / Liu, Peng (Autor:in)

    Kongress:

    Sensors and Systems for Space Applications V ; 2012 ; Baltimore,Maryland,United States


    Erschienen in:

    Erscheinungsdatum :

    2012-05-07





    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Integrated situational awareness for cyber attack detection, analysis, and mitigation [8385-21]

    Cheng, Y. / Sagduyu, Y. / Deng, J. et al. | British Library Conference Proceedings | 2012


    Novel Approaches to Space Cyber Situational Awareness

    Betser, J. / Belz, F. / Ewart, R. et al. | British Library Conference Proceedings | 2011


    Novel Approaches to Space Cyber Situational Awareness

    Ewart, Roberta / Betser, Joseph / Belz, Frank | AIAA | 2011



    Situational awareness

    Salas, Eduardo ;Dietz, Aaron S. | TIBKAT | 2011