Profiles of Cyber-Attackers and Attacks

Kavallieros, Dimitris; Germanos, Georgios; Kolokotronis, Nicholas

doi:10.1201/9781003006145-1

Search citation statements

Order By: Relevance

Paper Sections

Select...

Categorization Of Advanced Threat Actors1

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2022

Publication Types

Select...

Other1

Article1

Relationship

Self Cite0

Independent2

Authors

Journals

Cited by 2 publications

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this way, different classification schemes for the categorization of threat actors have been defined in literature. In [321] Dimitrios Kavallieros et al classify threat actors into three groups: internal to the organization, external to the organization and mixed; the authors also provide a taxonomy of seven categories of cyber crime actors, from coders to criminals. Alternative classifications are provided in [539], [389] or [198], where Youngsup Shit et al propose an automated classification scheme for threat actors based on the MITRE ATT&CK framework.…”

Section: Categorization Of Advanced Threat Actorsmentioning

confidence: 99%

Modeling of Advanced Threat Actors: Characterization, Categorization and Detection

Huerta¹

View full text Add to dashboard Cite

show abstract

Section: Categorization Of Advanced Threat Actorsmentioning

confidence: 99%

Modeling of Advanced Threat Actors: Characterization, Categorization and Detection

Huerta¹

View full text Add to dashboard Cite

show abstract

Incorporating Cyber Threat Intelligence into Complex Cyber-Physical Systems: A STIX Model for Active Buildings

2022

View full text Add to dashboard Cite

Active buildings can be briefly described as smart buildings with distributed and renewable energy resources able to energise other premises in their neighbourhood. As their energy capacity is significant, they can provide ancillary services to the traditional power grid. As such, they can be a worthy target of cyber-attacks potentially more devastating than if targeting traditional smart buildings. Furthermore, to handshake energy transfers, they need additional communications that add up to their attack surface. In such a context, security analysis would benefit from collection of cyber threat intelligence (CTI). To facilitate the analysis, we provide a base active building model in STIX in the tool cyberaCTIve that handles complex models. Active buildings are expected to implement standard network security measures, such as intrusion-detection systems. However, to timely respond to incidents, real-time detection should promptly update CTI, as it would significantly speed up the understanding of the nature of incidents and, as such, allow for a more effective response. To fill this gap, we propose an extension to the tool cyberaCTIve with a web service able to accept (incursion) feeds in real-time and apply the necessary modifications to a STIX model of interest.

show abstract

Profiles of Cyber-Attackers and Attacks

Cited by 2 publications

References 0 publications

Modeling of Advanced Threat Actors: Characterization, Categorization and Detection

Modeling of Advanced Threat Actors: Characterization, Categorization and Detection

Incorporating Cyber Threat Intelligence into Complex Cyber-Physical Systems: A STIX Model for Active Buildings

Contact Info

Product

Resources

About