Top

Published in:

2020 | OriginalPaper | Chapter

Stochastic Model of the Simple Cyber Kill Chain: Cyber Attack Process as a Regenerative Process

Author : Romuald Hoffmann

Published in: Computer Information Systems and Industrial Management

Publisher: Springer International Publishing

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Abstract

The proposed model extends the Markov model of the simple cyber kill chain already published in the literature by assumption of any continuous probability distribution of adversaries’ and defenders’ activity time. The description of the chain is based on the cyber kill chain concept initially introduced by Lockheed Martin’s researchers as the intrusion kill chain. The model includes the assumption of repeatability of cyber-attacks. On this basis, the stationary probabilities of staying of the attack process in individual phases were determined.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter Dynamic Ensemble Selection – Application to Classification of Cutting Tools

next chapter Genetic Algorithm for Generation Multistage Tourist Route of Electrical Vehicle

event indicator, binary indicator function

McAfee: McAfee Labs Threats Report, August 2019. https://www.mcafee.com/enterprise/en-us/assets/reports/rp-quarterly-threats-aug-2019.pdf (2019), last accessed 2019/11/01

https://www.fireeye.com/cyber-map/threat-map.html. Accessed 02 Jan 2020

https://threatmap.checkpoint.com. Accessed 02 Dec 2019

Mandiant, APT1: Exposing One of China’s Cyber Espionage Units. Mandiant (2013). www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf. Accessed 31 Jan 2020

Cloppert M.: Security Intelligence: Attacking the Kill Chain. http://computer-forensics.sans.org/blog/2009/10/14/security-intelligence-attacking-the-kill-chain/. Accessed 02 Nov 2019

Hutchins, E.M., Cloppert, M.J., Amin, R.M.: Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains, Leading Issues in Information Warfare and Security Research, vol. 1, pp. 78–104. Academic Publishing International Ltd, Reading, UK (2011)

ENISA: ENISA Threat Landscape Report 2018 (2019). https://www.enisa.europa.eu/publications/enisa-threat-landscape-report-2018. Accessed 02 Nov 2019

Hoffmann, R.: Markov models of cyber kill chains with iterations. In: 2019 International Conference on Military Communications and Information Systems (ICMCIS) (2019). https://doi.org/10.1109/icmcis.2019.8842810

Lockheed Martin: Seven Ways to Apply the Cyber Kill Chain with a Threat Intelligence Platform. Lockheed Martin Corporation (2015). https://www.lockheedmartin.com/content/dam/lockheed-martin/rms/documents/cyber/Seven_Ways_to_Apply_the_Cyber_Kill_Chain_with_a_Threat_Intelligence_Platform.pdf. Accessed 02 Nov 2019

10.

Yadav, T., Rao, A.M.: Technical aspects of cyber kill chain. In: Abawajy, Jemal H., Mukherjea, S., Thampi, Sabu M., Ruiz-Martínez, A. (eds.) SSCC 2015. CCIS, vol. 536, pp. 438–452. Springer, Cham (2015). https://doi.org/10.1007/978-3-319-22915-7_40CrossRef

11.

Spring, J.M., Hatleback, E.: Thinking about intrusion kill chains as mechanisms. J. Cybersecur. 3(3), 185–197 (2017)

12.

Coleman, K.G.J.: Aggression in cyberspace. conflict and cooperation in the global commons: a comprehensive approach for international security, pp. 105–119. Georgetown University Press, Washington DC (2012)

13.

Khan, M.S., Siddiqui, S., Ferens, K.: A cognitive and concurrent cyber kill chain model. In: Daimi, K. (ed.) Computer and Network Security Essentials, pp. 585–602. Springer, Cham (2018). https://doi.org/10.1007/978-3-319-58424-9_34CrossRef

14.

Hahn, A., Thomas, R.K., Lozano, I., Cardenas, A.: A multi-layered and kill-chain based security analysis framework for cyber-physical systems. Int. J. Crit. Infrastruct. Prot. 11, 39–50 (2015)CrossRef

15.

Hoffmann, R.: Markowowskie modele cykli życia ataku cybernetycznego. Roczniki Kolegium Analiz Ekonomicznych SGH, z 54, 303–317 (2019)

16.

Hoffmann, R.: Ogólny cykl życia ataku cybernetycznego i jego markowowski model. Ekonomiczne Problemy Usług 131(2/1), 121–130 (2018)CrossRef

17.

Keller, W., Modarres, M.: A historical overview of probabilistic risk assessment development and its use in the nuclear power industry: a tribute to the late Professor Norman Carl Rasmussen. Reliab. Eng. Syst. Saf. 89(3), 271–285 (2005)CrossRef

18.

Kaplan, S., Garrick, B.J.: On the quantitative definition of risk. Risk Anal. 1(1), 11–27 (1981)CrossRef

19.

Klimow, G.P.: Procesy obsługi masowej. WNT, Warszawa (1979)

20.

Beichelt, F.: Stochastic Processes in Science, Engineering and Finance. Taylor & Francis Group, LLC, New York (2006)CrossRef

21.

Kowalenko, I.N., Kuzniecow, N.J., Szurienkow, W.M.: Procesy stochastyczne. Poradnik. PWN, Warszawa (1989)

Title: Stochastic Model of the Simple Cyber Kill Chain: Cyber Attack Process as a Regenerative Process
Author: Romuald Hoffmann
Publisher: Springer International Publishing
Book: Computer Information Systems and Industrial Management
Print ISBN: 978-3-030-47678-6

Electronic ISBN: 978-3-030-47679-3

Copyright Year: 2020
DOI: https://doi.org/10.1007/978-3-030-47679-3_30

Springer Professional

Abstract

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner