Advanced Persistent Threats (APTs) represent the most challenging threats to the security and safety of the cyber landscape. APTs are human-driven attacks backed by complex strategies that combine multidisciplinary skills in information technology, intelligence, and psychology. Defending large organisations with tens of thousands of hosts requires similar multi-factor approaches. We propose a novel framework that combines different techniques based on big data analytics and security intelligence to support human analysts in prioritising the hosts that are most likely to be compromised. We show that the collection and integration of internal and external indicators represents a step forward with respect to the state of the art in the field of early detection and mitigation of APT activities.

MARCHETTI, M., PIERAZZI, F., GUIDO, A., COLAJANNI, M. (2016). Countering Advanced Persistent Threats through Security Intelligence and Big Data Analytics. IEEE [10.1109/CYCON.2016.7529438].

Countering Advanced Persistent Threats through Security Intelligence and Big Data Analytics

MARCHETTI, Mirco;COLAJANNI, Michele
2016

Abstract

Advanced Persistent Threats (APTs) represent the most challenging threats to the security and safety of the cyber landscape. APTs are human-driven attacks backed by complex strategies that combine multidisciplinary skills in information technology, intelligence, and psychology. Defending large organisations with tens of thousands of hosts requires similar multi-factor approaches. We propose a novel framework that combines different techniques based on big data analytics and security intelligence to support human analysts in prioritising the hosts that are most likely to be compromised. We show that the collection and integration of internal and external indicators represents a step forward with respect to the state of the art in the field of early detection and mitigation of APT activities.
2016
Proc. of the 8th NATO International Conference on Cyber Conflicts (CyCon 2016),
243
261
MARCHETTI, M., PIERAZZI, F., GUIDO, A., COLAJANNI, M. (2016). Countering Advanced Persistent Threats through Security Intelligence and Big Data Analytics. IEEE [10.1109/CYCON.2016.7529438].
MARCHETTI, Mirco; PIERAZZI, FABIO; GUIDO, ALESSANDRO; COLAJANNI, Michele
File in questo prodotto:
Eventuali allegati, non sono esposti

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11585/812092
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 34
  • ???jsp.display-item.citation.isi??? 22
social impact