Integrated situational awareness for cyber attack detection, analysis, and mitigation

Yi Cheng; Yalin Sagduyu; Julia Deng; Jason Li; Peng Liu

doi:10.1117/12.919261

24 May 2012 Integrated situational awareness for cyber attack detection, analysis, and mitigation

Yi Cheng, Yalin Sagduyu, Julia Deng, Jason Li, Peng Liu

Proceedings Volume 8385, Sensors and Systems for Space Applications V; 83850N (2012) https://doi.org/10.1117/12.919261
Event: SPIE Defense, Security, and Sensing, 2012, Baltimore, Maryland, United States

Abstract

Real-time cyberspace situational awareness is critical for securing and protecting today's enterprise networks from various cyber threats. When a security incident occurs, network administrators and security analysts need to know what exactly has happened in the network, why it happened, and what actions or countermeasures should be taken to quickly mitigate the potential impacts. In this paper, we propose an integrated cyberspace situational awareness system for efficient cyber attack detection, analysis and mitigation in large-scale enterprise networks. Essentially, a cyberspace common operational picture will be developed, which is a multi-layer graphical model and can efficiently capture and represent the statuses, relationships, and interdependencies of various entities and elements within and among different levels of a network. Once shared among authorized users, this cyberspace common operational picture can provide an integrated view of the logical, physical, and cyber domains, and a unique visualization of disparate data sets to support decision makers. In addition, advanced analyses, such as Bayesian Network analysis, will be explored to address the information uncertainty, dynamic and complex cyber attack detection, and optimal impact mitigation issues. All the developed technologies will be further integrated into an automatic software toolkit to achieve near real-time cyberspace situational awareness and impact mitigation in large-scale computer networks.

Citation Download Citation

Yi Cheng, Yalin Sagduyu, Julia Deng, Jason Li, and Peng Liu "Integrated situational awareness for cyber attack detection, analysis, and mitigation", Proc. SPIE 8385, Sensors and Systems for Space Applications V, 83850N (24 May 2012); https://doi.org/10.1117/12.919261

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available