Details

Autor(en) / Beteiligte

• Gonzalez-Granadillo, Gustavo
• Doynikova, Elena
• Garcia-Alfaro, Joaquin
• Kotenko, Igor
• Fedorchenko, Andrey

Titel

Stateful RORI-based countermeasure selection using hypergraphs

Ist Teil von

• Journal of information security and applications, 2020-10, Vol.54, p.102562-102562:14, Article 102562

Ort / Verlag

Elsevier Ltd

Erscheinungsjahr

2020

Quelle

Alma/SFX Local Collection

Beschreibungen/Notizen

• •A quantitative model that evaluates security actions against complex attack scenarios at each state of the system.•A process that dynamically evaluates the StRORI index on multiple candidates while considering restrictions, and interdependency among them.•A methodology to compute the parameters composing the StRORI index.•The integration of the StRORI index with a hypergraph model.•The implementation of the model over a real attack scenario. Cost-sensitive metrics have been widely used during the past years as financial metrics that quantify the monetary costs and benefits of security investments, assess risks, and select countermeasures accordingly. However, due to the complexity of current attacks, and the level of dynamicity required in the estimation of the parameters composing the metrics, the use of a novel approach that considers restrictions, inter-dependency, as well as, the previous and current state at which the system is exposed to, is required. We propose in this article a Stateful Return on Response Investment (denoted by StRORI) that uses hypergraphs to model actions that have been previously deployed (e.g., at state ST0) while the current state of the system (e.g., ST1) is under analysis. As a result, StRORI is a dynamic tool that considers the changes of the system in terms of number of active devices, previously deployed countermeasures, the cost of adding a new countermeasure or suppressing a previously deployed one, and the effectiveness of a group of security measures due to the implementation of a given action. A case study is presented about the integration of the StRORI index with hypergraph models to assess countermeasures against cyber attacks.