A Study on a Scenario-Based Security Incident Prediction System for Cybersecurity
Source abstract
Abstract
In the 4th industrial era, the proliferation of interconnected smart devices and advancements in AI, particularly big data and machine learning, have integrated various industrial domains into cyberspace. This convergence brings novel security threats, making it essential to prevent known incidents and anticipate potential breaches. This study develops a scenario-based evaluation system to predict and evaluate possible security accidents using the MITRE ATT&CK framework. It analyzes various security incidents, leveraging attack strategies and techniques to create detailed security scenarios and profiling services. Key contributions include integrating security logs, quantifying incident likelihood, and establishing proactive threat management measures. The study also proposes automated security audits and legacy system integration to enhance security posture. Experimental results show the system’s efficacy in detecting and preventing threats, providing actionable insights and a structured approach to threat analysis and response. This research lays the foundation for advanced security prediction systems, ensuring robust defense mechanisms against emerging cyber threats.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Information and Cyber Security · Network Security and Intrusion Detection · Technology and Data Analysis
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Hacking & Security, Far East University, Chungbuk 27601, Republic of Korea
Funding
2024 Far East University Research
References (43)
Show source-provided references
1. Technology for Preventing Industrial Technology Leakage Based on MITRE ATT&CK Framework
2. Current Status and Prospects of Industrial Technology Leakage through Cyber Attacks10.18284/jss.2012.12.31.2.7 ↗
3. Korea Internet & Security Agency (KISA) (2021). National Information Security White Paper, KISA.
4. A Study on Response Measures by Type through Analysis of Industrial Confidential Leakage Cases
5. Vulnerability Mitigation System Construction Method Based on ATT&CK in Military Internal Network Environment
6. A Study on Cyber Threat Response Measures for Mitigating Internal Network Vulnerabilities Based on ATT&CK
7. Panther Labs (2024, November 27). MITRE ATT&CK Framework & Incident Response. Available online: https://panther.com/cyber-explained/mitre-attack-framework-incident-response.
8. Aggregating Vulnerability Metrics in Enterprise Networks Using Attack Graphs
9. Artificial Intelligence for Cybersecurity: Literature Review and Future Research Directions10.1016/j.inffus.2023.101804 ↗
10. The Analysis for Cyber Security Threats in Remote Working Environment
11. Gan, C., Lin, J., Huang, D.-W., Zhu, Q., and Tian, L. (2023). Advanced Persistent Threats and Their Defense Methods in Industrial Internet of Things: A Survey. Mathematics, 11.10.3390/math11143115 ↗
12. Strom, B.E., Applebaum, A., Miller, D.P., Nickels, K.C., Pennington, A.G., and Thomas, C.B. (2020). MITRE ATT&CK®: Design and Philosophy, MITRE Corporation.
13. (2021, March 18). ITRE ATT&CK Framework. Available online: https://10th-doctrine.tistory.com/351.
14. (2024, September 06). Cyber Threat Trends Report (Q4 2020). Available online: https://krcert.or.kr/data/reportView.do?bulletin_writing_sequence=35866.
15. ATT & CK 101 (2020, April 06). Medium. Available online: https://medium.com/mitre-attack/att-ck-101-17074d3bc62.
16. ATT & CK for Enterprise Introduction (2020, April 06). MITRE. Available online: https://attack.mitre.org/resources/enterprise-introduction/.
17. Kurtz, G. (2019, February 19). 2019 Global Threat Report Shows It Takes Innovation and Speed to Win Against Adversaries. Executive Viewpoint. Available online: https://example.com.
18. Strom, B.E., Applebaum, A., Miller, D.P., Nickels, K.C., Pennington, A.G., and Thomas, C.B. (2018). MITRE ATT&CK™: Design and Philosophy, MITRE Corporation.
19. Modeling attacks10.2495/SAFE-V4-N2-97-115 ↗
20. MITRE ATT&CK: State of the Art and Way Forward
21. Applebaum, A., Miller, D., Strom, B., Foster, H., and Thomas, C. (2017, January 9–12). Analysis of automated adversary emulation techniques. Proceedings of the Summer Simulation Multi-Conference, Bellevue, WA, USA.
22. Spear phishing in a barrel: Insights from a targeted phishing campaign10.1080/10919392.2019.1552745 ↗
23. Butavicius, M., Parsons, K., Pattinson, M., and McCormac, A. (2016). Breaching the human firewall: Social engineering in phishing and spear-phishing emails. arXiv.
24. Going spear phishing: Exploring embedded training and awareness10.1109/MSP.2013.106 ↗
25. Enhancing honeypot deception capability through network service fingerprinting10.1088/1742-6596/801/1/012057 ↗
26. Developer-driven threat modeling: Lessons learned in the trenches10.1109/MSP.2011.47 ↗
27. Can the common vulnerability scoring system be trusted? a Bayesian analysis10.1109/TDSC.2016.2644614 ↗
28. An ontology-based enterprise architecture10.1016/j.eswa.2009.06.073 ↗
29. Adaptive reflexivity threat protection10.3103/S0146411615080106 ↗
30. A threat model-based approach to security testing10.1002/spe.2111 ↗
31. Introducing ossf: A framework for online service cybersecurity risk management10.1016/j.cose.2016.12.008 ↗
32. A game oriented approach to minimizing cybersecurity risk10.2495/SAFE-V8-N2-212-222 ↗
33. Data collection prioritization for system quality analysis. Electron10.1016/j.entcs.2009.02.059 ↗
34. A design science research methodology for information systems research10.2753/MIS0742-1222240302 ↗
35. Threat modeling using attack trees
36. The cyber security modeling language: A tool for assessing the vulnerability of enterprise system architectures10.1109/JSYST.2012.2221853 ↗
37. An extensible pattern-based library and taxonomy of security threats for distributed systems10.1016/j.csi.2013.12.008 ↗
38. Automating threat modeling using an ontology framework10.1186/s42400-020-00060-8 ↗
39. Load balancing of renewable energy: A cyber security analysis10.1186/s42162-018-0010-x ↗
40. A method for assigning probability distributions in attack simulation languages10.7250/csimq.2021-26.04 ↗
41. Threat modeling—A systematic literature review10.1016/j.cose.2019.03.010 ↗
42. Roy, S., Panaousis, E., Noakes, C., Laszka, A., Panda, S., and Loukas, G. (2023). SoK: The MITRE ATT&CK Framework in Research and Practice. arXiv.
43. An empirical evaluation of the effectiveness of attack graphs and MITRE ATT&CK matrices in aiding cyber attack perception amongst decision-makers. SLSEVIER10.1016/j.cose.2023.103254 ↗