Fuzzy cognitive map-based reasoning for prediction of multi-stage attacks in risk assessment. (2016)

• Record Type: Journal Article
• Authors: Sarala, R.; Zayaraz, G.; Vijayalakshmi, V.
• Is Part Of: International journal of intelligent engineering informatics. Volume 4:Number 2(2016)
• Page Start: 151
• Page End: 167
• Publication Date: 2016
• Subjects: information security -- risk assessment -- causal events -- multi-stage attacks -- fuzzy cognitive maps -- FCMs -- attack prediction -- modelling -- network security; Artificial intelligence -- Engineering applications -- Periodicals; Engineering -- Computer programs -- Periodicals; Knowledge management -- Periodicals; 620.0028563
• Languages: English
• ISSNs: 1758-8715

Abstract

The knowledge and sophistication with which attacks are carried out in recent times, makes it essential for the organisations to carry out risk assessment in a proactive manner in order to reduce the risk impact. Multi-stage attacks are a form of complex attacks which target more than one computer in a network to carry out an attack. In order to have an effective risk management the multi-stage attacks that occur in multiple steps also need to be considered. To predict the multi-stage attacks the causality between the steps in the execution of the attack need to be modelled which can be done using fuzzy cognitive maps. Fuzzy cognitive maps can serve as a reasoning tool as they provide the fuzzy degree of causation between the events. The proposed system makes use of fuzzy cognitive maps to model the causally dependent events to predict multi-stage attacks.