A Computational Model of Cyber Situational Awareness

Dobson, Geoffrey B.; Carley, Kathleen M.

doi:10.1007/978-3-319-93372-6_43

Cited by 5 publications

(3 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The situation concept that plays a critical role in the cyber situation awareness (CSA) is a global concept, presenting the states of diversified information assets in the cyber system (including the IoT systems) 8 . In other words, the situation is acquired by synthesizing all of the information assets states 9 . Any isolated state can hardly represent the situation of a cyber system as they perhaps ignore the systematic perspective.…”

Section: Background and Related Workmentioning

confidence: 99%

“…8 In other words, the situation is acquired by synthesizing all of the information assets states. 9 Any isolated state can hardly represent the situation of a cyber system as they perhaps ignore the systematic perspective. In our previous work, 10 we have demonstrated that entire CSA processes can be summarized into three specific phases: cyber situation perception, cyber situation comprehension, and cyber situation projection (the framework of CSA is shown in Figure 1).…”

Section: Cyber Situation Perceptionmentioning

confidence: 99%

See 1 more Smart Citation

Cyber situation perception for Internet of Things systems based on zero‐day attack activities recognition within advanced persistent threat

Cheng

Zhang

et al. 2020

Concurrency and Computation

View full text Add to dashboard Cite

With the development of the Internet of Things (IoT) technology, various attacks and threats have emerged. The advanced persistent threat (APT) refers to a class of advanced multiple-steps attacks among diverse attack activities, which brings severe threats to the IoT systems ascribe to its pertinence, concealment, and permeability.However, the existing technologies and methods fail to timely recognize the APT attack activities (especially the zero-day exploits) in a comprehensive scope. To address this problem, we propose a novel method of cyber situation perception for IoT systems, which based on zero-day attack activity recognition within APT (CSPAPTM). Moreover, we also design an edge computing framework for applying CSPAPTM to the typical IoT systems. Specifically, we first provide a cyber situation perception ontology construction module for describing the APT attack activities. Then, a malicious C&C DNS mining method (MCCDRM) is proposed to control the APT malicious activity correlation analysis trigger, which can effectively decrease the computing overhead. Finally, we propose a zero-day attack activity recognition method within APT (ZDAARA), which acts on system call instances to recognize the malicious activities, which cannot be detected by IDS. A relatively mature access control mechanism PO-SAAC is also applied to our method. Through the coalescent of these methods, CSPAPTM can accomplish the cyber situation perception effectively by the zero-day attack activities recognition in the IoT systems. The exhaustive experimental results demonstrate that the two kernel modules, that is, MCCDRM and ZDAARA in our CSPAPTM, can achieve both higher F 1 score and acceptable false positive rate.

show abstract

Section: Background and Related Workmentioning

confidence: 99%

Section: Cyber Situation Perceptionmentioning

confidence: 99%

Cyber situation perception for Internet of Things systems based on zero‐day attack activities recognition within advanced persistent threat

Cheng

Zhang

et al. 2020

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…Desta forma, a Ciência de Situação torna-se um conceito central, permitindo a composição de uma visão em alto nível de abstração dos contextos de interesse das aplicações. O processamento dos dados de contexto pode envolver o emprego de diversas técnicas, baseadas em regras, aprendizado ou ambas, formando um fluxo de processamento em que informações são agregadas até que as situações de interesse possam ser identificadas (Dobson and Carley, 2018).…”

Section: Introdu ç ãOunclassified

Uma Solução de Smart Farm Explorando Ciência de Situação na IoT para Países em Desenvolvimento

Albandes

Machado

Stigger

et al. 2021

Procedings Do XV Simpósio Brasileiro De Automação Inteligente

View full text Add to dashboard Cite

According to the National Water Agency (ANA), approximately 46.2% of all clean water used in Brazil is destined for irrigation, which has been motivating the evaluation of alternatives for water supply agricultural crops. Considering this scenario, this article presents the IoT SF-Automation proposal, which aims to explore Situation Awareness in the decisionmaking process, with the perspective of minimizing socioenvironmental impacts. For evaluation of IoT SF-Automation a prototype was developed that integrates open-source IoT technologies to the EXEHDA middleware and explores a weather prediction service. The results achieved were promising, reaching a success rate of approximately 94% regarding the irrigation decision.Resumo: De acordo com a Agência Nacional de Águas (ANA), aproximadamente 46,2% de toda água limpa empregada no Brasil é destinada à irrigação, o que vem motivando a avaliação de alternativas para fornecimento de água às culturas agrícolas. Considerando este cenário, este artigo apresenta a proposta IoT SF-Automation, que objetiva explorar Ciência de Situação na tomada da decisão de irrigação, com a perspectiva de minimizar impactos socioambientais.Para avaliação da IoT SF-Automation foi desenvolvido um protótipo que integra tecnologias IoT open-source ao middleware EXEHDA e explora um serviço de previsão climatológica. Os resultados atingidos se mostraram promissores atingindo uma taxa de acerto de aproximadamente 94% quanto à decisão de irrigação.

show abstract