Cyberprints: Identifying Cyber Attackers by Feature Analysis

Abstract

Reaching this point in my education is hardly something for which I can claim the credit. For the past twenty-six years I have been encouraged, cared for, counseled, and educated by many truly amazing people. To list them all would require much more space than can be allotted here. In that way, this is both the easiest and hardest part of this document to write. However, I wish to highlight the following people who have stood out as enduring influences and to whom I credit any past or future successes otherwise attributed to me. First and foremost, I owe an eternal debt of gratitude to my parents, Bill and Denise, and all the rest of my family and extended family, who have been role models for everything I hope to become. Their generous support, whether it be emotional, financial, or just being willing to encourage me in all the many hobbies and activities I went through as a child, have instilled in me the eagerness to learn and willingness to do what it takes to reach for success. I have now been fortunate to add to this the wonderful extended family of my wife. My grandmother, Velma; grandfather, Paul; and uncle, Fred-all educators-are unfortunately not here to share this milestone with me. However, their example of the sanctity of education lingers with me. Additionally, my grandmother, Rose is not here to see the completion of this work, but her encouragement and interest in everything I've done all the way to the end will always stay with me. Many educators have inspired me, and yes, put up with me, over the twenty-one years I've spent in school. From my kindergarten teacher, Janet Leonard, who gave me and so many others the foundation for a successful career, to teachers like Diane Silvers, Marian Houseman, Bruce Bennett, and Brenda Yoakum, who allowed me the latitude to be myself, tolerated my non-conformity in the classroom, and pushed me to succeed in whatever ways I chose. Had I iii not had such caring and passionate people as a part of my educational career, I believe I would not have the insatiable curiosity that drives me today. At Iowa State, I have encountered a number of instructors and friends who have kept me on the path that has led me to finish this work. In particular, I thank Doug Jacobson, for all of the opportunities he has allowed me to participate in and the many years of support; and Mani Mina, for his contagious passion for learning and all the moral support and guidance he has offered me through my most difficult semesters. Without them, I don't know that I would have finished even a Bachelor's in Computer Engineering, not to mention anything further. Additionally, I thank the other members of my program of study committee-Tom Daniels (whom I have shared many hours with in cyber defense competitions), James McCormick, and Steffen Schmidt-for all of their input and guidance during the completion of this work. Many others have served as mentors and friends along the way. My friend and supervisor at the Krell Institute, Nazanin Imani, has always been willing to listen to me and lend her...

Security Assessment of Computer Networks Based on Attack Graphs and Security Events

“…Attack characteristics (such as attack potentiality/probability) are defined on the base of attack graphs [10]. Attacker parameters are related to possible attackers and are considered in [3,5,10,18]. Integral (system) characteristics involve features that define common security estimations [5,7,13,14].…”

Fast Network Attack Modeling and Security Evaluation based on Attack Graphs

“…Security metrics are an important element of the security evaluation system. From the system security level point of view a set of security metrics can be outlined: integral metrics of the common security level of system, metrics that define topological characteristics, malefactor characteristics and attack characteristics [3,19,32,34,35,37].…”

Comprehensive Multilevel Security Risk Assessment of Distributed Information Systems

“…In [10] calculation of the risk level on the base of the malefactor behavior is proposed. In some other papers, for example, in [5], attack attribution metrics are considered (the concrete actors involved, equipment and tools used, geographic position, motives, etc. ).…”