This paper addresses computational analysis of defence against Advanced Persistent Threats (APTs). The analysis is done by a behavioural network model for simulating the relevant processes, including (1) the APT attack chain itself and adaptivity of it by learning both by the hackers and by the organisation, (2) the understanding of the process by the organisation, and (3) management of the organisational response. Several variations of simulation experiments and a What-If analysis have been applied, leading to risk assessment.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Organizational Response to APT Attacks: Computational Analysis by Behavioral Network Modelling

  • Daneel Akers,
  • Tanner Blomquist,
  • Jan Niedziela,
  • Samuel Šebok,
  • Niek Jan van den Hout,
  • Debby Bouma,
  • Jan Treur,
  • Peter H. M. P. Roelofsma

摘要

This paper addresses computational analysis of defence against Advanced Persistent Threats (APTs). The analysis is done by a behavioural network model for simulating the relevant processes, including (1) the APT attack chain itself and adaptivity of it by learning both by the hackers and by the organisation, (2) the understanding of the process by the organisation, and (3) management of the organisational response. Several variations of simulation experiments and a What-If analysis have been applied, leading to risk assessment.