Evaluating threat assessment for multi-stage cyber attacks

Show full item record

Redirect: RIT Scholars content from RIT Digital Media Library has moved from http://ritdml.rit.edu/handle/1850/10758 to RIT Scholar Works http://scholarworks.rit.edu/other/606, please update your feeds & links!
Title: Evaluating threat assessment for multi-stage cyber attacks
Author: Yang, Shanchieh; Holsopple, Jared; Sudit, Moises
Abstract: Current practices to defend against cyber attacks are typically reactive yet passive. Recent research work has been proposed to proactively predict hacker's target entities in the early stage of the attack. With prediction, there comes false alarms and missed attacks. Very little has been reported on how to evaluate a threat assessment algorithm, especially for cyber security. Because of the variety and the constantly changing nature of hacker behavior and network vulnerabilities, a cyber threat assessment algorithm is, perhaps more susceptible that for other application domains. This work sets forth the issues on evaluating cyber threat assessment algorithms, and discusses the validity of various statistical measures. Simulation examples are provided to illustrate the pros and cons of using different metrics under various cyber attack scenarios. Our results show that commonly used false positives and false negatives are necessary but not sufficient to evaluate cyber threat assessment.
Record URI: http://hdl.handle.net/1850/10758
Date: 2006-10

Files in this item

Files Size Format View
SYangConfProc10-2006.pdf 10.24Mb PDF View/Open

The following license files are associated with this item:

This item appears in the following Collection(s)

Show full item record

Search RIT DML

Advanced Search