Towards Dynamic Risk Management: Success Likelihood of Ongoing Attacks

Kanoun, Waël; Dubus, Samuel; Papillon, Serge; Cuppens-Boulahia, Nora; Cuppens, Frdric

doi:10.1002/bltj.21558

Cited by 5 publications

(1 citation statement)

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Detection languages [17,20] describe the detection of an attack according to a number of occurrences of events. Response languages [21,12] describe how to react when an attack is detected.…”

Section: Introductionmentioning

confidence: 99%

Discus: A massively distributed IDS architecture using a DSL-based configuration

Riquet

Grimaud

Hauspie

2014

2014 International Conference on Information Science, Electronics and Electrical Engineering

View full text Add to dashboard Cite

Abstract-Nowadays, cloud computing becomes quite popular and a lot of research is done on services it provides. Most of security challenges induced by this new architecture are not yet tackled. In this work, we propose a new security architecture, based on a massively distributed network of security solutions, to address these challenges. Current solutions, like IDS or firewalls, were not formerly designed to detect attacks that draw profit from the cloud structure. Our solution DISCUS is based on a distributed architecture using both physical and virtual probes, along with former security solutions (IDS and firewalls). This paper describes DISCUS SCRIPT, a dedicated language that provides an easy way to configure the components of our solution.

show abstract

Section: Introductionmentioning

confidence: 99%

Discus: A massively distributed IDS architecture using a DSL-based configuration

Riquet

Grimaud

Hauspie

2014

2014 International Conference on Information Science, Electronics and Electrical Engineering

View full text Add to dashboard Cite

show abstract

Situation Calculus and Graph Based Defensive Modeling of Simultaneous Attacks

Samarji¹,

Cuppens²,

Cuppens-Boulahia³

et al. 2013

Cyberspace Safety and Security

View full text Add to dashboard Cite

International audienceRecent attacks are better coordinated, difficult to discover, and inflict severe damages to networks. However, existing response systems handle the case of a single ongoing attack. This limitation is due to the lack of an appropriate model that describes coordinated attacks. In this paper, we address this limitation by presenting a new formal description of individual, coordinated, and concurrent attacks. Afterwards, we combine Graph Theory and our attack description in order to model attack graphs that cover the three attacks types. Finally, we show how to automatically generate these attack graphs using a logical approach based on Situation Calculus

show abstract