Uncertainty and Risk Management in Cyber Situational Awareness

Li, Jason ; Ou, Xinming ; Rajagopalan, Raj

HP Development Company

关键词: security;    uncertainty;    logic;    empirical analysis;   

RP-ID  :  HPL-2009-174

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

Handling cyber threats unavoidably needs to deal with both uncertain and imprecise information. What we can observe as potential malicious activities can seldom give us 100% confidence on important questions we care about, e.g. what machines are compromised and what damage has been incurred. In security planning, we need information on how likely a vulnerability can lead to a successful compromise to better balance security and functionality, performance, and ease of use. These information are at best qualitative and are often vague and imprecise. In cyber situational awareness, we have to rely on such imperfect information to detect real attacks and to prevent an attack from happening through appropriate risk management. This chapter surveys existing technologies in handling uncertainty and risk management in cyber situational awareness.