Cyber-security Risk Assessment
| dc.contributor.advisor | Baecher, Gregory B | en_US |
| dc.contributor.author | Panjwani, Susmit | en_US |
| dc.contributor.department | Civil Engineering | en_US |
| dc.contributor.publisher | Digital Repository at the University of Maryland | en_US |
| dc.contributor.publisher | University of Maryland (College Park, Md.) | en_US |
| dc.date.accessioned | 2011-10-08T06:03:24Z | |
| dc.date.available | 2011-10-08T06:03:24Z | |
| dc.date.issued | 2011 | en_US |
| dc.description.abstract | Cyber-security domain is inherently dynamic. Not only does system configuration changes frequently (with new releases and patches), but also new attacks and vulnerabilities are regularly discovered. The threat in cyber-security is human, and hence intelligent in nature. The attacker adapts to the situation, target environment, and countermeasures. Attack actions are also driven by attacker's exploratory nature, thought process, motivation, strategy, and preferences. Current security risk assessment is driven by cyber-security expert's theories about this attacker behavior. The goal of this dissertation is to automatically generate the cyber-security risk scenarios by: * Capturing diverse and dispersed cyber-security knowledge * Assuming that there are unknowns in the cyber-security domain, and new knowledge is available frequently * Emulating the attacker's exploratory nature, thought process, motivation, strategy, preferences and his/her interaction with the target environment * Using the cyber-security expert's theories about attacker behavior The proposed framework is designed by using the unique cyber-security domain requirements identified in this dissertation and by overcoming the limitations of current risk scenario generation frameworks. The proposed framework automates the risk scenario generation by using the knowledge as it becomes available (or changes). It supports observing, encoding, validating, and calibrating cyber-security expert's theories. It can also be used for assisting the red-teaming process. The proposed framework generates ranked attack trees and encodes the attacker behavior theories. These can be used for prioritizing vulnerability remediation. The proposed framework is currently being extended for developing an automated threat response framework that can be used to analyze and recommend countermeasures. This framework contains behavior driven countermeasures that uses the attacker behavior theories to lead the attacker away from the system to be protected. | en_US |
| dc.identifier.uri | http://hdl.handle.net/1903/11969 | |
| dc.subject.pqcontrolled | Engineering | en_US |
| dc.subject.pqcontrolled | Computer science | en_US |
| dc.subject.pquncontrolled | Automated Planning | en_US |
| dc.subject.pquncontrolled | Cyber-security | en_US |
| dc.subject.pquncontrolled | Ontology | en_US |
| dc.subject.pquncontrolled | Risk Assessment | en_US |
| dc.title | Cyber-security Risk Assessment | en_US |
| dc.type | Dissertation | en_US |
Files
Original bundle
1 - 1 of 1
Loading...
- Name:
- Panjwani_umd_0117E_12532.pdf
- Size:
- 3.54 MB
- Format:
- Adobe Portable Document Format