Analysis of Adversarial Movement Through Characteristics of Graph Topological Ordering
Analysis of Adversarial Movement Through Characteristics of Graph Topological Ordering
复制标题
通过图拓扑排序特征分析对抗运动
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Z. Obradovic
中科院分区：
文献类型：
--
作者：
N. Asadi;Aunshul Rege;Z. Obradovic
捕捉对手移动的模式可以提供有关对手如何通过网络攻击取得进展的有价值的信息。这些信息可以进一步用于对对手的决策进行比较和解释。在这项研究中，我们提出了一个框架的基础上的概念，社交网络的特点和比较的模式，变化和变化的运动由一个敌对的团队在一个实时的网络安全演习。我们还探讨了运动关联的可能性，使用拓扑排序网络的技能集。这项研究提供了对抗运动的复杂性和线性以及随着网络攻击展开的决策的初步见解。
Capturing the patterns in adversarial movement can provide valuable information regarding how the adversaries progress through cyberattacks. This information can be further employed for making comparisons and interpretations of decision making of the adversaries. In this study, we propose a framework based on concepts of social networks to characterize and compare the patterns, variations and shifts in the movements made by an adversarial team during a real-time cybersecurity exercise. We also explore the possibility of movement association with the skill sets using topological sort networks. This research provides priliminary insight on adversarial movement complexity and linearity and decision-making as cyberattacks unfold.