@inproceedings{8fbe53463fcb4f6d9c4381220cd68dac,
title = "A multi-factor coordinated formal description method for network attacks",
abstract = "Cyber attacks are often costly, and attack models can better help researchers analyze complex attack behavior. Traditional threat models focus on the logical description of attacks, thus neglecting other critical factors in attacks. Therefore, this paper proposes a multi-factor coordinated formal description method for network attacks. This approach can provide a more comprehensive description by combining network environment, attack nodes, target assets, and collaborative description of attack steps. First, this paper proposes a description method that approximates the network topology to similarly describe the complex network environment and attack nodes. Subsequently, MAL and ATT\&CK matrices are used to describe the target assets and attack logic. The description methods from the two perspectives are combined to form a multi-factor coordinated formal description method. Finally, it is validated using actual attack cases. The method proposed in this paper can describe attack behavior more comprehensively.",
keywords = "ATT\&CK, Cyber attack, MAL, cyber attack model, near network topology",
author = "Wei Wang and Ke Kong and Hanlin Yang and Tianyu Chen and Gang Long and Jideng Han",
note = "Publisher Copyright: {\textcopyright} 2022 SPIE.; 3rd International Conference on Computer Communication and Network Security, CCNS 2022 ; Conference date: 15-07-2022 Through 17-07-2022",
year = "2022",
doi = "10.1117/12.2659650",
language = "英语",
series = "Proceedings of SPIE - The International Society for Optical Engineering",
publisher = "SPIE",
editor = "Chuanjun Zhao and Hilal Imane",
booktitle = "Third International Conference on Computer Communication and Network Security, CCNS 2022",
address = "美国",
}