Cyber Situational Awareness

1. Front Matter

   Pages i-xii

   PDF

2. Overview of Cyber Situational Awareness

   1. Front Matter

      Pages 1-1

      PDF

3. Part I Overview of Cyber Situational Awareness

   1. Cyber SA: Situational Awareness for Cyber Defense

      • Paul Barford, Marc Dacier, Thomas G. Dietterich, Matt Fredrikson, Jon Giffin, Sushil Jajodia et al.

      Pages 3-13

   2. Overview of Cyber Situation Awareness

      • George P. Tadda, John S. Salerno

      Pages 15-35

4. The Reasoning and Decision Making Aspects

   1. Front Matter

      Pages 38-38

      PDF

5. Part II The Reasoning and Decision Making Aspects

   1. RPD-based Hypothesis Reasoning for Cyber Situation Awareness

      • John Yen, Michael McNeese, Tracy Mullen, David Hall, Xiaocong Fan, Peng Liu

      Pages 39-49

   2. Uncertainty and Risk Management in Cyber Situational Awareness

      • Jason Li, Xinming Ou, Raj Rajagopalan

      Pages 51-68

6. Macroscopic Cyber Situational Awareness

   1. Front Matter

      Pages 70-70

      PDF

7. Part III Macroscopic Cyber Situational Awareness

   1. Employing Honeynets For Network Situational Awareness

      • Paul Barford, Yan Chen, Anup Goyal, Zhichun Li, Vern Paxson, Vinod Yegneswaran

      Pages 71-102

   2. Assessing Cybercrime Through the Eyes of the WOMBAT

      • Marc Dacier, Corrado Leita, Olivier Thonnard, Hau Van Pham, Engin Kirda

      Pages 103-136

8. Enterprise Cyber Situational Awareness

   1. Front Matter

      Pages 138-138

      PDF

9. Part IV Enterprise Cyber Situational Awareness

   1. Topological Vulnerability Analysis

      • Sushil Jajodia, Steven Noel

      Pages 139-154

   2. Cross-Layer Damage Assessment for Cyber Situational Awareness

      • Peng Liu, Xiaoqi Jia, Shengzhi Zhang, Xi Xiong, Yoon-Chan Jhi, Kun Bai et al.

      Pages 155-176

10. Microscopic Cyber Situational Awareness

    1. Front Matter

       Pages 178-178

       PDF

11. Part V Microscopic Cyber Situational Awareness

    1. A Declarative Framework for Intrusion Analysis

       • Matt Fredrikson, Mihai Christodorescu, Jonathon Giffin, Somesh Jhas

       Pages 179-200

    2. Automated Software Vulnerability Analysis

       • Emre C. Sezer, Chongkyung Kil, Peng Ning

       Pages 201-223

12. The Machine Learning Aspect

    1. Front Matter

       Pages 226-226

       PDF

13. Part VI The Machine Learning Aspect

    1. Machine Learning Methods for High Level Cyber Situation Awareness

       • Thomas G. Dietterich, Xinlong Bao, Victoria Keiser, Jianqiang Shen

       Pages 227-247

14. Back Matter

    Pages 1-1

    PDF

Motivation for the Book This book seeks to establish the state of the art in the cyber situational awareness area and to set the course for future research. A multidisciplinary group of leading researchers from cyber security, cognitive science, and decision science areas elab orate on the fundamental challenges facing the research community and identify promising solution paths. Today, when a security incident occurs, the top three questions security admin istrators would ask are in essence: What has happened? Why did it happen? What should I do? Answers to the ?rst two questions form the core of Cyber Situational Awareness. Whether the last question can be satisfactorily answered is greatly de pendent upon the cyber situational awareness capability of an enterprise. A variety of computer and network security research topics (especially some sys tems security topics) belong to or touch the scope of Cyber Situational Awareness. However, the Cyber Situational Awareness capability of an enterprise is still very limited for several reasons: • Inaccurate and incomplete vulnerability analysis, intrusion detection, and foren sics. • Lack of capability to monitor certain microscopic system/attack behavior. • Limited capability to transform/fuse/distill information into cyber intelligence. • Limited capability to handle uncertainty. • Existing system designs are not very “friendly” to Cyber Situational Awareness.

• Cyber Situational Awareness
• Forensics
• Information Fusion
• Internet
• Intrusion Back-tracking
• Network Telescopes
• RPD-Inspired
• Threat Analysis
• Topological Vulnerability
• currentjm
• learning
• security

• Ctr. Secure Information Systems, George Mason University, Fairfax, U.S.A.

  Sushil Jajodia

• College of Information Sciences &, Pennsylvania State University, University Park, U.S.A.

  Peng Liu

• MITRE Corporation, McLean, U.S.A.

  Vipin Swarup

• Computing and Information Science Div., US Army Research Office, Research Triangle Park, U.S.A.

  Cliff Wang

Policies and ethics