21
>> 0 >> 1 >> 2 >> 3 >> 4 >> 5 CYBER ATTACK MODELING AND SIMULATION FOR NETWORK SECURITY ANALYSIS By : Eki Hendrawanbrata (020310110)

Cyber Crime

Embed Size (px)

Citation preview

  • 1.CYBER ATTACK MODELING AND5 SIMULATION FOR NETWORK SECURITY ANALYSIS By : Eki Hendrawanbrata (020310110)>> 0>>1>>2 >>3 >> 4 >>

2. CYBER ATTACK MODELING AND SIMULATION FOR NETWORK SECURITYANALYSIS>> 0 >> 1 >> 2 >> 3 >> 4 >> 3. 5>> 0 >> 1 >> 2 >> 3 >> 4 >> 4. 4>> 0 >> 1 >> 2 >> 3 >> 4 >> 5. 3>> 0 >> 1 >> 2 >> 3 >> 4 >> 6. >> 0 >> 1 >> 2 >> 3 >> 4 >> 7. >> 0 >> 1 >> 2 >> 3 >> 4 >> 8. PRESENTATIONSTARTED>> 0 >> 1 >> 2 >> 3 >> 4 >> 9. TOPICS INTRODUCTION BACKGROUND AND RELATED WORK OVERVIEW OF THE SIMULATION MODEL SIMULATION METHODOLOGY CYBER ATTACK EXAMPLE UTILIZING THE ATTACK SIMULATOR TO EVALUATE INFORMATION FUSION METHODS CONCLUSIONS>> 0 >> 1 >> 2>> 3>> 4>> 10. INTRODUCTION As the use of computer networks grows, cyber security is becoming increasingly important. Present a simulation modeling approach to represent computer networks and intrusion detection systems (IDS) to efficiently simulate cyber attack scenarios>> 0 >>1 >> 2>> 3>> 4>> 11. BACKGROUND ANDRELATED WORK The need for testing situational awareness tools that are being developed to detect and analyze attacks on computer networks. The simulation approach requires knowledge of the operation of the desired network and its operation.>> 0>> 1>>2>>3 >>4>> 12. OVERVIEW OF THE SIMULATION MODEL The simulation model provides a user with the ability to construct a representative computer network and setup and execute a series of cyber attacks on certain target machines within that network.>> 0>> 1>>2 >>3 >>4>> 13. >> 0 >> 1 >> 2 >> 3 >> 4 >> 14. SIMULATION METHODOLOGY Modeling Computer Networks The computer network is modeled using two basic constructs: machines and connectors. Modeling Cyber Attacks The scope of this work is on cyber attacks that are initiated by a hacker through the Internet.>> 0>>1 >>2>> 3>>4 >> 15. Progression of a cyber attack on a computer network from the internet>> 0 >> 1 >> 2 >> 3 >>4 >> 16. Directed graph representing attack structureGiven the attack structure (in theform of the guidance template) andthe network configuration specified,the user also specifies a targetmachine, a goal, and several otherattack relatedparameters(discussed previously) through aseries of forms.>> 0 >> 1 >> 2>> 3>>4>> 17. Automate attack generationmethod The logic will then determine the guidance template progression for the external target, now using Stage 0 through Stage 4.>> 0 >> 1 >> 2>>3>> 4>> 18. >>CYBER ATTACK EXAMPLE 4 >> 3 >> 2 >> 1 >> 0 >> 19. UTILIZING THE ATTACK SIMULATOR TO EVALUATE INFORMATION FUSIONMETHODSInformation fusion is theprocessofassociating,correlating, and combiningdata and information fromsingle or multiple sources toestimate parameters,characteristics, and behaviorsof a system>>0 >> 1 >> 2>> 3 >>4 >> 20. CONCLUSIONS The Cyber Attack Simulator presented in this paper is capable of generating IDS alert and ground truth files based on the specification of a computer network and attacks.>> 0 >>1 >>2 >> 3>> 4>> 21. THANK YOU FOR YOUR ATTENTION>> 0>> 1 >> 2 >> 3 >> 4 >>