Please use this identifier to cite or link to this item:
http://bura.brunel.ac.uk/handle/2438/17863
Title: | A Markov Multi-phase Transferable Belief Model for Cyber Situational Awareness |
Authors: | Ioannou, G Louvieris, P Clewley, N |
Keywords: | APT;combination rule;conflict;cyberspace;kill-chain;Markov processes |
Issue Date: | 6-Feb-2019 |
Publisher: | Institute of Electrical and Electronics Engineers |
Citation: | Ioannou, G., Louvieris, P. and Clewley, N. (2019) 'A Markov Multi-Phase Transferable Belief Model for Cyber Situational Awareness,' IEEE Access, 7, pp. 39305-39320, doi: 10.1109/ACCESS.2019.2897923. |
Abstract: | eXfiltration Advanced Persistent Threats (XAPTs) increasingly account for incidents concerned with critical information ex ltration from High Valued Targets (HVTs). Existing Cyber Defence frameworks and data fusion models cannot cope with XAPTs due to a lack of provision for multi-phase attacks characterized by uncertainty and con icting information. The Markov Multi-phase Transferable Belief Model (MM-TBM) extends the Transferable Belief Model to address the multi-phase nature of cyber-attacks and to obtain previously indeterminable Cyber SA. As a data fusion technique, MM-TBM constitutes a novel approach for performing hypothesis assessment and evidence combination across phases, by means of a new combination rule, called the Multi-phase Combination Rule with con ict Reset (MCR2). The impact of MM-TBM as a Cyber Situational Awareness capability and its implications as a multi-phase data fusion theory have been empirically validated through a series of scenario-based Cyber SA experiments for detecting, tracking, and predicting XAPTs. |
URI: | https://bura.brunel.ac.uk/handle/2438/17863 |
DOI: | https://doi.org/10.1109/ACCESS.2019.2897923 |
Appears in Collections: | Dept of Computer Science Research Papers |
Files in This Item:
File | Description | Size | Format | |
---|---|---|---|---|
FullText.pdf | 8.46 MB | Adobe PDF | View/Open |
Items in BURA are protected by copyright, with all rights reserved, unless otherwise indicated.