.png){kind=icon}
返回
Cybersecurity knowledge graph enabled attack chain detection for cyber-physical systems
.png){kind=icon}
PRE
AI
DOI：10.1016/j.compeleceng.2023.108660.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The Cyber-Physical System covers a wide range of applications, many of which are involved in critical infrastructure, and the cybersecurity attacks on them become more and more threatening. Currently, most of the comprehensive analysis of compound attacks depend on the experience of security analysts. To improve the efficiency and accuracy of compound attack research, this paper introduces a knowledge graph into compound attack detection and constructs a cybersecurity knowledge graph based on the knowledge of known attacks. The cybersecurity knowledge graph can carry out correlation analysis on real-time data to restore the attack process. The main work of this paper is to construct the cybersecurity knowledge graph and to apply mining found compound attacks automatically. Besides, a multi-dimensional data association analysis algo-rithm based on dynamic clustering mechanism, and an attack chain complementation-pruning method based on optimal reaching path queries are proposed to solve the problem of low effi-ciency in correlation analysis caused by redundant data and the problem of missing and mis-understandings in the collection data. Experiments show that the cyber security knowledge graph construction method and attack chain optimization-pruning method proposed in this paper improve the accuracy and efficiency of attack chain mining.
Keyword:
Cyber-physical systems
Knowledge representation
Association analysis
Attack rule base
Compound attack chain complementation-pruning
期刊
C
IF:
4.9
论文数:
6.7K
被引数:
1.3W
机构
引用论文
.png){kind=icon}
One model packs thousands of items with Recurrent Conditional Query Learning一个模型包含成千上万的项目与循环条件查询学习
OAAI
OAAI分享收藏分享收藏 没有更多内容
没有更多内容