A Markov multi-phase transferable belief model for cyber situational awareness

dc.contributor.authorIoannou, Georgios
dc.contributor.authorLouvieris, Panos
dc.contributor.authorClewley, Natalie
dc.date.accessioned2019-05-13T15:37:49Z
dc.date.available2019-05-13T15:37:49Z
dc.date.issued2019-02-06
dc.description.abstracteXfiltration Advanced Persistent Threats (XAPTs) increasingly account for incidents concerned with critical information exfiltration from High Valued Targets (HVTs). Existing Cyber Defence frameworks and data fusion models cannot cope with XAPTs due to a lack of provision for multi-phase attacks characterized by uncertainty and conflicting information. The Markov Multi-phase Transferable Belief Model (MM-TBM) extends the Transferable Belief Model to address the multi-phase nature of cyber-attacks and to obtain previously indeterminable Cyber SA. As a data fusion technique, MM-TBM constitutes a novel approach for performing hypothesis assessment and evidence combination across phases, by means of a new combination rule, called the Multi-phase Combination Rule with conflict Reset (MCR 2 ). The impact of MM-TBM as a Cyber Situational Awareness capability and its implications as a multi-phase data fusion theory have been empirically validated through a series of scenario-based Cyber SA experiments for detecting, tracking, and predicting XAPTs.en_UK
dc.identifier.citationIoannou G, Louvieris P, Clewley N. Markov multi-phase transferable belief model for cyber situational awareness. IEEE Access, Volume 7, 2019, pp. 39305-39320en_UK
dc.identifier.cris23140118
dc.identifier.issn2169-3536
dc.identifier.urihttps://doi.org/10.1109/ACCESS.2019.2897923
dc.identifier.urihttp://dspace.lib.cranfield.ac.uk/handle/1826/14151
dc.language.isoenen_UK
dc.publisherIEEEen_UK
dc.rightsAttribution-NonCommercial 4.0 International*
dc.rights.urihttp://creativecommons.org/licenses/by-nc/4.0/*
dc.subjectAPTen_UK
dc.subjectcombination ruleen_UK
dc.subjectconflicten_UK
dc.subjectcyberspaceen_UK
dc.subjectkill-chainen_UK
dc.subjectMarkov processesen_UK
dc.subjectpredictionen_UK
dc.subjectsensor fusionen_UK
dc.subjectsituational awarenessen_UK
dc.subjectuncertaintyen_UK
dc.titleA Markov multi-phase transferable belief model for cyber situational awarenessen_UK
dc.typeArticleen_UK

Files

Original bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
A_Markov_multi-phase_transferable_belief_model-2019.pdf
Size:
8.31 MB
Format:
Adobe Portable Document Format
Description:
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.63 KB
Format:
Item-specific license agreed upon to submission
Description: