arrow
Return

Stateful RORI-based countermeasure selection using hypergraphs

delete2020-10-01
delete1
PRE
AI
G
Gustavo González-Granadillo *
E
Elena Doynikova
J
Joaquín García-Alfaro
I
Igor Kotenko
A
Andrey Fedorchenko
DOI:10.1016/j.jisa.2020.102562delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Cost-sensitive metrics have been widely used during the past years as financial metrics that quantify the monetary costs and benefits of security investments, assess risks, and select countermeasures accordingly. However, due to the complexity of current attacks, and the level of dynamicity required in the estimation of the parameters composing the metrics, the use of a novel approach that considers restrictions, interdependency, as well as, the previous and current state at which the system is exposed to, is required. We propose in this article a Stateful Return on Response Investment (denoted by StRORI) that uses hyper graphs to model actions that have been previously deployed (e.g., at state ST0) while the current state of the system (e.g., ST1) is under analysis. As a result, StRORI is a dynamic tool that considers the changes of the system in terms of number of active devices, previously deployed countermeasures, the cost of adding a new countermeasure or suppressing a previously deployed one, and the effectiveness of a group of security measures due to the implementation of a given action. A case study is presented about the integration of the StRORI index with hypergraph models to assess countermeasures against cyber attacks. (C) 2020 Elsevier Ltd. All rights reserved.
Keywords:
Stateful RORI
Cost-sensitive metrics
Hypergraph models
Countermeasure selection
Network security
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

Journal of Information Security and Applications cover
Journal of Information Security and Applications
IF:
3.7
Papers:
1.9K
Citations:
4.9K

Organization

C
centre national de la recherche scientifique (cnrs)
Scholars:
24.5W
Papers: 18.2W
Citations: 279
I
imt - institut mines-telecom
Scholars:
7.4K
Papers: 6.4K
Citations: 5
I
institut polytechnique de paris
Scholars:
1.3W
Papers: 1.0W
Citations: 6
U
Universite Paris Saclay
Scholars:
7.3W
Papers: 5.3W
Citations: 540
researcher View more organizations