Understanding and Assessment of Mission-Centric Key Cyber Terrains for joint Military Operations
Álvaro Luis Martínez, Jorge Maestre Vidal, Victor A. Villagrá González
备注：
Preprint of an extended version of the conference "A novel automatic discovery system of critical assets in cyberspace-oriented military missions", in Proc. of the First Workshop on Recent Advances in Cyber Situational Awareness on Military Operations (CSA 2020) held by the 15th ARES International Conference in August 2020. https://doi.org/10.1145/3407023.3409225
Since the cyberspace consolidated as fifth warfare dimension, the different actors of the defense sector began an arms race toward achieving cyber superiority, on which research, academic and industrial stakeholders contribute from a dual vision, mostly linked to a large and heterogeneous heritage of developments and adoption of civilian cybersecurity capabilities. In this context, augmenting the conscious of the context and warfare environment, risks and impacts of cyber threats on kinetic actuations became a critical rule-changer that military decision-makers are considering. A major challenge on acquiring mission-centric Cyber Situational Awareness (CSA) is the dynamic inference and assessment of the vertical propagations from situations that occurred at the mission supportive Information and Communications Technologies (ICT), up to their relevance at military tactical, operational and strategical views. In order to contribute on acquiring CSA, this paper addresses a major gap in the cyber defence state-of-the-art: the dynamic identification of Key Cyber Terrains (KCT) on a mission-centric context. Accordingly, the proposed KCT identification approach explores the dependency degrees among tasks and assets defined by commanders as part of the assessment criteria. These are correlated with the discoveries on the operational network and the asset vulnerabilities identified thorough the supported mission development. The proposal is presented as a reference model that reveals key aspects for mission-centric KCT analysis and supports its enforcement and further enforcement by including an illustrative application case.
Crown Jewels Analysis using Reinforcement Learning with Attack Graphs
Deloitte Consulting, LLC（德勤咨询有限责任公司）；Hume Center for National Security and Technology, Virginia Polytechnic University（弗吉尼亚理工大学休姆国家安全与技术中心）；Deloitte & Touche LLP（德勤会计师事务所）
Leveraging Trustworthy AI for Automotive Security in Multi-Domain Operations: Towards a Responsive Human-AI Multi-Domain Task Force for Cyber Social Security
A Data-Driven Predictive Analysis on Cyber Security Threats with Key Risk Factors
University of Chittagong（吉大港大学）；Northwestern Polytechnical University（西北工业大学）；Noakhali Science and Technology University（诺阿卡利科技大学）；Chittagong University of Engineering & Technology（吉大港工程技术大学）；Edith Cowan University（伊迪斯科文大学）
本文针对网络风险预测问题，提出一种基于 Pertinent Features 随机森林的机器学习模型，结合问卷数据增强和 Apriori 关联规则分析，在20个特征下实现95.95%的准确率，有效识别网络攻击受害者及关键风险因素。
