Share Email Print
cover

Proceedings Paper

Integrated situational awareness for cyber attack detection, analysis, and mitigation
Author(s): Yi Cheng; Yalin Sagduyu; Julia Deng; Jason Li; Peng Liu
Format Member Price Non-Member Price
PDF $14.40 $18.00
cover GOOD NEWS! Your organization subscribes to the SPIE Digital Library. You may be able to download this paper for free. Check Access

Paper Abstract

Real-time cyberspace situational awareness is critical for securing and protecting today's enterprise networks from various cyber threats. When a security incident occurs, network administrators and security analysts need to know what exactly has happened in the network, why it happened, and what actions or countermeasures should be taken to quickly mitigate the potential impacts. In this paper, we propose an integrated cyberspace situational awareness system for efficient cyber attack detection, analysis and mitigation in large-scale enterprise networks. Essentially, a cyberspace common operational picture will be developed, which is a multi-layer graphical model and can efficiently capture and represent the statuses, relationships, and interdependencies of various entities and elements within and among different levels of a network. Once shared among authorized users, this cyberspace common operational picture can provide an integrated view of the logical, physical, and cyber domains, and a unique visualization of disparate data sets to support decision makers. In addition, advanced analyses, such as Bayesian Network analysis, will be explored to address the information uncertainty, dynamic and complex cyber attack detection, and optimal impact mitigation issues. All the developed technologies will be further integrated into an automatic software toolkit to achieve near real-time cyberspace situational awareness and impact mitigation in large-scale computer networks.

Paper Details

Date Published: 24 May 2012
PDF: 11 pages
Proc. SPIE 8385, Sensors and Systems for Space Applications V, 83850N (24 May 2012); doi: 10.1117/12.919261
Show Author Affiliations
Yi Cheng, Intelligent Automation, Inc. (United States)
Yalin Sagduyu, Intelligent Automation, Inc. (United States)
Julia Deng, Intelligent Automation, Inc. (United States)
Jason Li, Intelligent Automation, Inc. (United States)
Peng Liu, The Pennsylvania State Univ. (United States)


Published in SPIE Proceedings Vol. 8385:
Sensors and Systems for Space Applications V
Khanh D. Pham; Joseph L. Cox; Richard T. Howard; Henry Zmuda, Editor(s)

© SPIE. Terms of Use
Back to Top