In this paper, an implemented defense system is demonstrated to carry out cyber security situation awareness. The developed system consists of distributed passive and active network sensors designed to effectively capture suspicious information associated with cyber threats, effective detection schemes to accurately distinguish attacks, and network actors to rapidly mitigate attacks. Based on the collected data from network sensors, image-based and signals-based detection schemes are implemented to detect attacks. To further mitigate attacks, deployed dynamic firewalls on hosts dynamically update detection information reported from the detection schemes and block attacks. The experimental results show the effectiveness of the proposed system. A future plan to design an effective defense system is also discussed based on system theory.
Towards an integrated defense system for cyber security situation awareness experiment
Sensors and Systems for Space Applications VIII ; 2015 ; Baltimore,Maryland,United States
Proc. SPIE ; 9469
2015-05-22
Aufsatz (Konferenz)
Elektronische Ressource
Englisch
Integrated Situation Awareness
British Library Conference Proceedings | 2003
|On detection and visualization techniques for cyber security situation awareness [8739-28]
British Library Conference Proceedings | 2013
|Distributed security situation awareness detection system
Europäisches Patentamt | 2023
|