|Awan, Malik Shahzad Kaleem, Burnap, Peter and Rana, Omer Farooq 2016. Identifying cyber risk hotspots: A framework for measuring temporal variance in computer network risk. Computers and Security 57 , pp. 31-46. 10.1016/j.cose.2015.11.003|
- Published Version
Available under License Creative Commons Attribution.
Download (1MB) | Preview
Modern computer networks generate significant volume of behavioural system logs on a daily basis. Such networks comprise many computers with Internet connectivity, and many users who access the Web and utilise Cloud services make use of numerous devices connected to the network on an ad-hoc basis. Measuring the risk of cyber attacks and identifying the most recent modus-operandi of cyber criminals on large computer networks can be difficult due to the wide range of services and applications running within the network, the multiple vulnerabilities associated with each application, the severity associated with each vulnerability, and the ever-changing attack vector of cyber criminals. In this paper we propose a framework to represent these features, enabling real-time network enumeration and traffic analysis to be carried out, in order to produce quantified measures of risk at specific points in time. We validate the approach using data from a University network, with a data collection consisting of 462,787 instances representing threats measured over a 144 hour period. Our analysis can be generalised to a variety of other contexts.
|Schools:||Computer Science & Informatics|
|Subjects:||Q Science > QA Mathematics > QA75 Electronic computers. Computer science|
|Uncontrolled Keywords:||Cyber attacks; Network traffic analysis; System risk; Risk score; Risk grade; Cyber hotspots; Risk assessment framework|
|Last Modified:||29 Oct 2016 04:35|
Cited 1 time in Google Scholar. View in Google Scholar
Cited 3 times in Scopus. View in Scopus. Powered By Scopus® Data
Actions (repository staff only)