Cyberpatterns

1. Front Matter

   Pages i-xi

   PDF

2. Introduction

   1. Front Matter

      Pages 1-1

      PDF

   2. Cyberpatterns: Towards a Pattern Oriented Study of Cyberspace

      • Hong Zhu

      Pages 3-15

   3. Towards a Conceptual Framework for Security Patterns

      • Clive Blackwell

      Pages 17-34

3. Pattern Representation

   1. Front Matter

      Pages 35-36

      PDF

   2. Design Patterns: Applications and Open Issues

      • K. Lano

      Pages 37-45

   3. Challenges for a Formal Framework for Patterns

      • Ian Bayley

      Pages 47-55

   4. Towards a General Theory of Patterns

      • Hong Zhu

      Pages 57-69

4. Introduction to Security Patterns

   1. Front Matter

      Pages 71-72

      PDF

   2. Extending AOP Principles for the Description of Network Security Patterns

      • David Llewellyn-Jones, Qi Shi, Madjid Merabti

      Pages 73-84

   3. Management Patterns for Network Resilience: Design and Verification of Policy Configurations

      • Alberto Schaeffer-Filho, Paul Smith, Andreas Mauthe, David Hutchison

      Pages 85-95

   4. A Heuristic Approach for Secure Service Composition Adaptation

      • Bo Zhou, David Llewellyn-Jones, David Lamb, Muhammad Asim, Qi Shi, Madjid Merabti

      Pages 97-105

5. Introduction to Attack Patterns

   1. Front Matter

      Pages 107-109

      PDF

   2. A Strategy for Structuring and Formalising Attack Patterns

      • Clive Blackwell

      Pages 111-123

   3. Attack Pattern Recognition Through Correlating Cyber Situational Awareness in Computer Networks

      • Noor-ul-hassan Shirazi, Alberto Schaeffer-Filho, David Hutchison

      Pages 125-134

   4. Towards a Penetration Testing Framework Using Attack Patterns

      • Clive Blackwell

      Pages 135-148

   5. A Method for Resolving Security Vulnerabilities Through the Use of Design Patterns

      • Nick Walker, Natalie Coull, Ian Ferguson, Allan Milne

      Pages 149-155

   6. ‘Weird Machine’ Patterns

      • Sergey Bratus, Julian Bangert, Alexandar Gabrovsky, Anna Shubina, Michael E. Locasto, Daniel Bilar

      Pages 157-171

6. Socio-technical Aspects of Patterns

   1. Front Matter

      Pages 173-175

      PDF

   2. Towards a Simulation of Information Security Behaviour in Organisations

      • Martin Ruskov, Paul Ekblom, M. Angela Sasse

      Pages 177-184

Cyberspace in increasingly important to people in their everyday lives for purchasing goods on the Internet, to energy supply increasingly managed remotely using Internet protocols. Unfortunately, this dependence makes us susceptible to attacks from nation states, terrorists, criminals and hactivists. Therefore, we need a better understanding of cyberspace, for which patterns, which are predictable regularities, may help to detect, understand and respond to incidents better. The inspiration for the workshop came from the existing work on formalising design patterns applied to cybersecurity, but we also need to understand the many other types of patterns that arise in cyberspace.

• Aspect Oriented Programming
• Attack and Defense Patterns
• Complex Event Processing
• Composition Patterns of Hacking
• Cyber Situational Awareness
• Design Patterns
• Design Space
• Enterprise Security Systems
• Formal Methods
• Memory Corruption
• Network Resilience and Multi-level Resilience
• Network Security
• Pattern Representation
• Policy Configuration
• Secure Component Composition / Secure Service Composition
• Software and Security Patterns

From the book reviews:

“It is recommended reading for academics with an interest in the area. Its secondary audience would be security professionals and software developers. … This well-written book achieves its purposes--to describe the current state of research in the subject area and to outline directions for future research--quite well.” (Neil D. Burgess, Computing Reviews, September, 2014)

• Department of Computing and Communication Technologies, Oxford Brookes University, Oxford, United Kingdom

  Clive Blackwell, Hong Zhu

Policies and ethics