With the explosive growth of network technologies, insider attacks have become a major concern to business operations that largely rely on computer networks. To better detect insider attacks that marginally manipulate network traffic over time, and to recover the system from attacks, in this paper we implement a temporal-based detection scheme using the sequential hypothesis testing technique. Two hypothetical states are considered: the null hypothesis that the collected information is from benign historical traffic and the alternative hypothesis that the network is under attack. The objective of such a detection scheme is to recognize the change within the shortest time by comparing the two defined hypotheses. In addition, once the attack is detected, a server migration-based system recovery scheme can be triggered to recover the system to the state prior to the attack. To understand mitigation of insider attacks, a multi-functional web display of the detection analysis was developed for real-time analytic. Experiments using real-world traffic traces evaluate the effectiveness of Detection System and Recovery (DeSyAR) scheme. The evaluation data validates the detection scheme based on sequential hypothesis testing and the server migration-based system recovery scheme can perform well in effectively detecting insider attacks and recovering the system under attack.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    On resilience studies of system detection and recovery techniques against stealthy insider attacks


    Contributors:
    Wei, Sixiao (author) / Zhang, Hanlin (author) / Chen, Genshe (author) / Shen, Dan (author) / Yu, Wei (author) / Pham, Khanh D. (author) / Blasch, Erik P. (author) / Cruz, Jose B. (author)

    Conference:

    Sensors and Systems for Space Applications IX ; 2016 ; Baltimore,Maryland,United States


    Published in:

    Publication date :

    2016-05-13





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    UAV Resilience Against Stealthy Attacks

    Amorim, Arthur / Taylor, Max / Kann, Trevor et al. | IEEE | 2025


    Baiting For Defense Against Stealthy Attacks on Cyber-Physical Systems

    Flamholz, David B. / Annaswamy, Anuradha M. / Lavretsky, Eugene | TIBKAT | 2019


    Baiting For Defense Against Stealthy Attacks on Cyber-Physical Systems

    Flamholz, David B. / Annaswamy, Anuradha M. / Lavretsky, Eugene | AIAA | 2019