A Semantic-Based Approach for Assessing the Impact of Cyber-Physical Attacks: A Healthcare Infrastructure Use Case

Rihany, Mohamad; Hannou, Fatma-Zohra; Mimouni, Nada; Hamdi, Fayçal; Tourron, Philippe; Julien, Pierre-Alain

doi:10.1007/978-3-030-86982-3_16

Cited by 2 publications

(3 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This can be particularly useful if information about a threat actor is extracted from multiple sources and then subsequently fused and represented as a single knowledge graph. 36 https://lod-cloud.net 37 Common Attack Pattern Enumeration and Classification, https://capec.mitre.org 38 Malware Attribute Enumeration and Characterization, https://maecproject.github.io 39 Common Weakness Enumeration, https://cwe.mitre.org 40 Common Vulnerabilities and Exposures, https://cve.mitre.org 41 Common Vulnerability Scoring System, https://www.first.org/cvss/ 42 Cyber Observable eXpression, https://cyboxproject.github.io 43 Common Platform Enumeration, https://nvd.nist.gov/products/cpe 44 Open Indicators of Compromise, https://github.com/mandiant/OpenIOC_1.1 45…”

Section: Knowledge Graph-based Koses For Cybersecurity Applicationsmentioning

confidence: 99%

See 1 more Smart Citation

Cybersecurity knowledge graphs

Sikos

2023

Knowl Inf Syst

View full text Add to dashboard Cite

Cybersecurity knowledge graphs, which represent cyber-knowledge with a graph-based data model, provide holistic approaches for processing massive volumes of complex cybersecurity data derived from diverse sources. They can assist security analysts to obtain cyberthreat intelligence, achieve a high level of cyber-situational awareness, discover new cyber-knowledge, visualize networks, data flow, and attack paths, and understand data correlations by aggregating and fusing data. This paper reviews the most prominent graph-based data models used in this domain, along with knowledge organization systems that define concepts and properties utilized in formal cyber-knowledge representation for both background knowledge and specific expert knowledge about an actual system or attack. It is also discussed how cybersecurity knowledge graphs enable machine learning and facilitate automated reasoning over cyber-knowledge.

show abstract

Section: Knowledge Graph-based Koses For Cybersecurity Applicationsmentioning

confidence: 99%

“…Based on semantic modeling and a reasoning engine asset categories, relationships and input/output incident types, the impacts of complex cyber-physical attacks against critical infrastructure can be propagated and the mitigation of potential harming effects assisted [45].…”

Section: Automated Reasoning Over Cybersecurity Knowledge Graphsmentioning

confidence: 99%

Cybersecurity knowledge graphs

Sikos

2023

Knowl Inf Syst

View full text Add to dashboard Cite

show abstract

“…This knowledge on the transformations of incidents is security expertise exclusively held by security experts evolving in the medical field, understanding the consequences of attacks. The following paragraph explains how this knowledge has been exploited to build the rules repository (initial model is to be consulted in [15]).…”

Section: Impact Propagation Approach a Propagation Mechanismsmentioning

confidence: 99%

Semantic-Based Approach for Cyber-Physical Cascading Effects Within Healthcare Infrastructures

et al. 2022

Self Cite

View full text Add to dashboard Cite

This paper presents a framework for integrated cyber-physical security propagation study within critical infrastructures (hospitals use case). The framework includes an ontology for the semantic modeling of cyber-physical security. The impact propagation approach relies on propagation rules inferring the cascading effects of security incidents occurring in hospitals. An impact score module allows evaluating impacts' severity, considering implemented protection measures. This work is part of the European project SAFECARE, which provides a set of tests and demonstration sessions in partnership with 3 hospitals in Europe. During these tests, we measured effectiveness and efficiency metrics, as well as end users' satisfaction feedback. Experiments performed on real attack scenarios, show high effectiveness rates and a common agreement from end-users about the added value of the solution to enhance risks analysis practice and increase hospitals mitigation strategies efficiency.

show abstract

A Semantic-Based Approach for Assessing the Impact of Cyber-Physical Attacks: A Healthcare Infrastructure Use Case

Cited by 2 publications

References 9 publications

Cybersecurity knowledge graphs

Cybersecurity knowledge graphs

Semantic-Based Approach for Cyber-Physical Cascading Effects Within Healthcare Infrastructures

Contact Info

Product

Resources

About