APT-oriented Dynamic Assessment of Attack Behaviors

Authors

Jindong Wang, Information Engineering University, Zhengzhou 450001, China;
Haopu Yang, Information Engineering University, Zhengzhou 450001, China;
Hengwei Zhang, Information Engineering University, Zhengzhou 450001, China;
Li Tao, Information Engineering University, Zhengzhou 450001, China;

Abstract

Abstract: The existing attack assessment methods cannot effectively deal with the long-term concealment in APT attack. Aiming at the accurate assessment of attack behaviors in APT attack, the APT-oriented dynamic assessment of attack behaviors which focuses on both the space dimension and the time dimension is proposed. The attack behaviors are correlated in the causality-diversion among the whole network system to discover the attack paths. The attack paths are modified in the time-diversion to get the dynamic causal attack traces. The attack traces are quantified based on CVSS standard. The experimental result shows that the proposed method can correctly reflect the attack status and effectively assess the attack behavior.

Recommended Citation

Wang, Jindong; Yang, Haopu; Zhang, Hengwei; and Tao, Li (2019) "APT-oriented Dynamic Assessment of Attack Behaviors," Journal of System Simulation: Vol. 30: Iss. 10, Article 25.
DOI: 10.16182/j.issn1004731x.joss.201810025
Available at: https://dc-china-simulation.researchcommons.org/journal/vol30/iss10/25

First Page

3796

Revised Date

2016-12-19

DOI Link

https://doi.org/10.16182/j.issn1004731x.joss.201810025

Last Page

3806

CLC

TP393.08

Recommended Citation

Wang Jindong, Yang Haopu, Zhang Hengwei, Li Tao. APT-oriented Dynamic Assessment of Attack Behaviors[J]. Journal of System Simulation, 2018, 30(10): 3796-3806.

DOI

10.16182/j.issn1004731x.joss.201810025