Informace o publikaci

Survey of Attack Projection, Prediction, and Forecasting in Cyber Security



Rok publikování 2019
Druh Článek v odborném periodiku
Časopis / Zdroj IEEE Communications Surveys & Tutorials
Fakulta / Pracoviště MU

Ústav výpočetní techniky

Klíčová slova cyber security;intrusion detection;situational awareness;prediction;forecasting;model checking
Přiložené soubory
Popis This paper provides a survey of prediction, and forecasting methods used in cyber security. Four main tasks are discussed first, attack projection and intention recognition, in which there is a need to predict the next move or the intentions of the attacker, intrusion prediction, in which there is a need to predict upcoming cyber attacks, and network security situation forecasting, in which we project cybersecurity situation in the whole network. Methods and approaches for addressing these tasks often share the theoretical background and are often complementary. In this survey, both methods based on discrete models, such as attack graphs, Bayesian networks, and Markov models, and continuous models, such as time series and grey models, are surveyed, compared, and contrasted. We further discuss machine learning and data mining approaches, that have gained a lot of attention recently and appears promising for such a constantly changing environment, which is cyber security. The survey also focuses on the practical usability of the methods and problems related to their evaluation.
Související projekty: