TY - GEN
T1 - An n-sided polygonal model to calculate the impact of cyber security events
AU - Gonzalez-Granadillo, Gustavo
AU - Garcia-Alfaro, Joaquin
AU - Debar, Hervé
N1 - Publisher Copyright:
© Springer International Publishing AG 2017.
PY - 2017/1/1
Y1 - 2017/1/1
N2 - This paper presents a model to represent graphically the impact of cyber events (e.g., attacks, countermeasures) in a polygonal systems of n-sides. The approach considers information about all entities composing an information system (e.g., users, IP addresses, communication protocols, physical and logical resources, etc.). Every axis is composed of entities that contribute to the execution of the security event. Each entity has an associated weighting factor that measures its contribution using a multi-criteria methodology named CARVER. The graphical representation of cyber events is depicted as straight lines (one dimension) or polygons (two or more dimensions). Geometrical operations are used to compute the size (i.e., length, perimeter, surface area) and thus the impact of each event. As a result, it is possible to identify and compare the magnitude of cyber events. A case study with multiple security events is presented as an illustration on how the model is built and computed.
AB - This paper presents a model to represent graphically the impact of cyber events (e.g., attacks, countermeasures) in a polygonal systems of n-sides. The approach considers information about all entities composing an information system (e.g., users, IP addresses, communication protocols, physical and logical resources, etc.). Every axis is composed of entities that contribute to the execution of the security event. Each entity has an associated weighting factor that measures its contribution using a multi-criteria methodology named CARVER. The graphical representation of cyber events is depicted as straight lines (one dimension) or polygons (two or more dimensions). Geometrical operations are used to compute the size (i.e., length, perimeter, surface area) and thus the impact of each event. As a result, it is possible to identify and compare the magnitude of cyber events. A case study with multiple security events is presented as an illustration on how the model is built and computed.
KW - CARVER
KW - Impact representation
KW - Multiple cyber events
KW - Polygonal model
KW - Response actions
U2 - 10.1007/978-3-319-54876-0_7
DO - 10.1007/978-3-319-54876-0_7
M3 - Conference contribution
AN - SCOPUS:85014934395
SN - 9783319548753
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 87
EP - 102
BT - Risks and Security of Internet and Systems - 11th International Conference, CRiSIS 2016, Revised Selected Papers
A2 - Cuppens, Nora
A2 - Cuppens, Frederic
A2 - Lanet, Jean-Louis
A2 - Legay, Axel
PB - Springer Verlag
T2 - 11th International Conference on Risks and Security of Internet and Systems, CRISIS 2016
Y2 - 5 September 2016 through 7 September 2016
ER -