CRUSOE: Data Model for Cyber Situation Awareness

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14610%2F18%3A00106889" target="_blank" >RIV/00216224:14610/18:00106889 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.1145/3230833.3232798" target="_blank" >http://dx.doi.org/10.1145/3230833.3232798</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1145/3230833.3232798" target="_blank" >10.1145/3230833.3232798</a>

Result language
angličtina
Original language name
CRUSOE: Data Model for Cyber Situation Awareness
Original language description
Attaining and keeping cyber situational awareness is crucial for the proper incident response, especially in critical infrastructures. Incident handlers need to process heterogeneous data, such as network topology and organisation's missions and objectives, to effectively mitigate the threats. The development of tools for attaining cyber situational awareness often faces the problem of effectively obtaining, correlating, and storing such heterogeneous data. In this paper, we present CRUSOE, an extensible layered data model for attaining and keeping information on cyber situational awareness. We conducted interviews with incident handlers from several security teams and evaluated existing requirements on cyber situational awareness to formalise the requirements on the proposed data model so that can be used in today's common network settings. The CRUSOE data model keeps track of missions, systems, networks, hosts, threats, detection and response capabilities, and access control in a network of an organisation. It is also designed to be filled primarily with the data that can be obtained in a semi- or fully-automated fashion in today's common network environments.
Czech name
—
Czech description
—

Project
<a href="/en/project/VI20172020070" target="_blank" >VI20172020070: Research of Tools for Cyber Situational Awareness and Decision Support of CSIRT Teams in Protection of Critical Infrastructure</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2018
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
Proceedings of the 13th International Conference on Availability, Reliability and Security
ISBN
9781450364485
ISSN
—
e-ISSN
—
Number of pages
10
Pages from-to
„36:1“-„36:10“
Publisher name
ACM
Place of publication
Hamburg
Event location
Hamburg
Event date
Aug 27, 2018
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
000477981800072

Similar results(10)