Attack Specification Language: Domain Specific Language for Dynamic Training in Cyber Range

Arshad, Sobia; Alam, Masoom; Al-Kuwari, Saif; Khan, Muhammad Haider Ali

doi:10.1109/educon46332.2021.9454094

Cited by 6 publications

(5 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Accordingly, they propose an attack sequence generation approach that uses Hidden Markov Models (HMM) as its core component. The authors of [38] leverage the MITRE ATT&CK knowledge-base to propose an Attack Specific Language (ASL) that provides a unified representation for all cyberthreat scenarios. ASL provides information and knowledge about attack techniques in a brief format that streamlines and automates the malicious activities of threat and challenge execution.…”

Section: Related Workmentioning

confidence: 99%

Analysis and Characterization of Cyber Threats Leveraging the MITRE ATT&CK Database

Al-Sada,

Sadighian,

Oligeri

2024

IEEE Access

View full text Add to dashboard Cite

MITRE ATT&CK is a comprehensive knowledge-base of adversary tactics, techniques, and procedures (TTP) based on real-world attack scenarios. It has been used in different sectors, such as government, academia, and industry, as a foundation for threat modeling, risk assessment, and defensive strategies. There are valuable insights within MITRE ATT&CK knowledge-base that can be applied to various fields and applications, such as risk assessment, threat characterization, and attack modeling. No previous work has been devoted to the comprehensive collection and investigation of statistical insights of the MITRE ATT&CK dataset. Hence, this work aims to extract, analyze, and represent MITRE ATT&CK statistical insights providing valuable recommendations to improve the security aspects of Enterprise, Industrial Control Systems (ICS), and mobile digital infrastructures. For this purpose, we conduct a hierarchical analysis starting from MITRE ATT&CK threat profiles toward the list of techniques in the MITRE ATT&CK database. Finally, we summarize our key findings while providing recommendations that will pave the way for future research in the area.

show abstract

Section: Related Workmentioning

confidence: 99%

Analysis and Characterization of Cyber Threats Leveraging the MITRE ATT&CK Database

Al-Sada,

Sadighian,

Oligeri

2024

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Even though it is a systematic approach, it is fo-cused on their environment. Similarly, (Arshad et al, 2021) propose a domain-specific language based on the MITRE ATT&CK framework for dynamic training in cyber range environments. The authors describe the classification, environment, execution, and evaluation in a systematic, but also high-level way.…”

Section: Related Workmentioning

confidence: 99%

How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications

Eipper

Pöhn

2023

Proceedings of the 9th International Conference on Information Systems Security and Privacy

View full text Add to dashboard Cite

Cyber attacks are ubiquitous and a constantly growing threat in the age of digitization. In order to protect important data, developers and system administrators must be trained and made aware of possible threats. Practical training can be used for students alike to introduce them to the topic. A constant threat to websites that require user authentication is so-called brute-force attacks, which attempt to crack a password by systematically trying every possible combination. As this is a typical threat, but comparably easy to detect, it is ideal for beginners. Therefore, three open-source blue team scenarios are designed and systematically described. They are contiguous to maximize the learning effect.

show abstract

“…ASL (Attack Specification Language) [10] provides an integrated representation of cyber threat scenarios for cybersecurity trainers. Considering the dynamic nature of the cyber threat scenarios, ASL is built with the innate feature to deduce the most advantageous attack technique given the conditions using machine learning based inference.…”

Section: Related Workmentioning

confidence: 99%

ICSTASY: An Integrated Cybersecurity Training System for Military Personnel

et al. 2022

View full text Add to dashboard Cite

Cyberwarfare can occur at any moment, anywhere on the planet, and it happens more often than we realize. The new form of warfare is wreaking havoc on not only the military but also on every aspect of our daily lives. Since cybersecurity has only recently established itself as a critical element of the military, the military community relies heavily on the private sector to ensure cyber mission assurance. Given the military's secrecy, such reliance may increase the danger of mission degradation or failure. To address this issue, the military has attempted to build a dedicated cybersecurity training system for the purpose of internalizing cybersecurity training. However, existing cybersecurity training systems frequently lack comprehensive support for effective and efficient cybersecurity training. In this study, we propose ICSTASY, a scenario-based, interactive, and immersive cybersecurity training platform that supports a variety of training features holistically. The primary requirements and design principles required to overcome the challenges inherent in developing a cyber training system were offered based on a review of prior work. Through the demonstration of our prototype, we have proven the feasibility of efficient and truly realistic cyber training, not only for the military environment but also for the private sector.

show abstract

Attack Specification Language: Domain Specific Language for Dynamic Training in Cyber Range

Cited by 6 publications

References 6 publications

Analysis and Characterization of Cyber Threats Leveraging the MITRE ATT&CK Database

Analysis and Characterization of Cyber Threats Leveraging the MITRE ATT&CK Database

How to Design a Blue Team Scenario for Beginners on the Example of Brute-Force Attacks on Authentications

ICSTASY: An Integrated Cybersecurity Training System for Military Personnel

Contact Info

Product

Resources

About