scholarly journals Modeling Conflicts Resulting from Sharing Telecommunication Resource between Antagonistic Control Systems

2021 ◽  
Vol 2096 (1) ◽  
pp. 012038
Author(s):  
V Kh Fedorov ◽  
E G Balenko ◽  
Yu I Starodubtsev ◽  
E V Vershennik

Abstract Today state-of-the-art communication systems, whilst being limited in resources, use a shared information and telecommunication network to provide integrated communication services; the resources of such a network are split between various control systems, some of which may conflict, resulting in a variety of malware attacks. This paper dwells upon a method for modeling conflicts resulting from sharing a telecommunication resource between antagonistic control systems; the method takes into account the use of such a shared resource (ITCN) and the following processes: data processing by cyber threat intelligence systems, and making decisions on executing MAs upon the elements of conflicting control systems; for each moment of simulation time, the method calculates the current potential of each conflicting system in order to find the average potential degradation time.

Author(s):  
John Robertson ◽  
Ahmad Diab ◽  
Ericsson Marin ◽  
Eric Nunes ◽  
Vivin Paliath ◽  
...  

Author(s):  
Nolan Arnold ◽  
Mohammadreza Ebrahimi ◽  
Ning Zhang ◽  
Ben Lazarine ◽  
Mark Patton ◽  
...  

2019 ◽  
Vol 11 (7) ◽  
pp. 162 ◽  
Author(s):  
Nikolaos Serketzis ◽  
Vasilios Katos ◽  
Christos Ilioudis ◽  
Dimitrios Baltatzis ◽  
Georgios Pangalos

The complication of information technology and the proliferation of heterogeneous security devices that produce increased volumes of data coupled with the ever-changing threat landscape challenges have an adverse impact on the efficiency of information security controls and digital forensics, as well as incident response approaches. Cyber Threat Intelligence (CTI)and forensic preparedness are the two parts of the so-called managed security services that defendants can employ to repel, mitigate or investigate security incidents. Despite their success, there is no known effort that has combined these two approaches to enhance Digital Forensic Readiness (DFR) and thus decrease the time and cost of incident response and investigation. This paper builds upon and extends a DFR model that utilises actionable CTI to improve the maturity levels of DFR. The effectiveness and applicability of this model are evaluated through a series of experiments that employ malware-related network data simulating real-world attack scenarios. To this extent, the model manages to identify the root causes of information security incidents with high accuracy (90.73%), precision (96.17%) and recall (93.61%), while managing to decrease significantly the volume of data digital forensic investigators need to examine. The contribution of this paper is twofold. First, it indicates that CTI can be employed by digital forensics processes. Second, it demonstrates and evaluates an efficient mechanism that enhances operational DFR.


Sign in / Sign up

Export Citation Format

Share Document