Measuring the effectiveness of modern security products to detect and contain emerging threats &amp;#x2014; A consensus-based approach

Osorio, Fernando C. Colon; Leitold, Ferenc; Mike, Dorottya; Pickard, Chris J.; Miladinov, Sveta; Arrott, Anthony

doi:10.1109/malware.2013.6703682

Cited by 9 publications

(6 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, [42] explained a consensus-based approach to assessing the effectiveness of modern security products for detecting and containing emerging threats [42]. With the emergence of cloud computing and cyberthreats today, people and companies alike have realized several things [42]. First, there are no longer any network borders under you can control and safeguard.…”

Section: The Critical Problem Of Emerging Threatsmentioning

confidence: 99%

“…First, there are no longer any network borders under you can control and safeguard. Second, Due to the essence of threats, they are often dispersed both in time and setting that makes recognition very problematic [42]. Third, rather than supposing you can avoid infections, the working supposition is the speed at which can you notice the breach and how do you most lessen its influence [42].…”

Section: The Critical Problem Of Emerging Threatsmentioning

confidence: 99%

“…Second, Due to the essence of threats, they are often dispersed both in time and setting that makes recognition very problematic [42]. Third, rather than supposing you can avoid infections, the working supposition is the speed at which can you notice the breach and how do you most lessen its influence [42]. It was shown that transportation networks in current society must be harmless, protected, and well-organized [43].…”

Section: The Critical Problem Of Emerging Threatsmentioning

confidence: 99%

“…Consensus identifies new threats as malicious or not when (n/2+1) security products agree on the nature of the threat over time. The method was developed as a simplified extension of the well-known Byzantine Agreement protocol, first discussed by Leslie Lamport [53].…”

Section: Consensus Reachingmentioning

confidence: 99%

“…To test the ability of commercial gateway and endpoint security services to classify and categorize different types of web traffic (malicious content, malicious activity, and nonmalicious content), the authors have developed benchmark metrics [53]. This methodology was used to evaluate eight gateway protection services for identifying malicious traffic, command and control (C2) communications, and nonmalicious content.…”

Section: Consensus Reachingmentioning

confidence: 99%

See 4 more Smart Citations

Turning the Hunted into the Hunter via Threat Hunting: Life Cycle, Ecosystem, Challenges and the Great Promise of AI

Hillier¹,

Karroubi²

2022

Preprint

View full text Add to dashboard Cite

The threat hunting lifecycle is a complex atmosphere that requires special attention from professionals to maintain security. This paper is a collection of recent work that gives a holistic view of the threat hunting ecosystem, identifies challenges, and discusses the future with the integration of artificial intelligence (AI). We specifically establish a life cycle and ecosystem for privacy-threat hunting in addition to identifying the related challenges. We also discovered how critical the use of AI is in threat hunting. This work paves the way for future work in this area as it provides the foundational knowledge to make meaningful advancements for threat hunting.

show abstract

Section: The Critical Problem Of Emerging Threatsmentioning

confidence: 99%

Section: The Critical Problem Of Emerging Threatsmentioning

confidence: 99%