A Framework for Generation, Replay, and Analysis of Real-world Attack Variants
Title | A Framework for Generation, Replay, and Analysis of Real-world Attack Variants |
Publication Type | Conference Paper |
Year of Publication | 2016 |
Authors | Cao, Phuong, Badger, Eric C., Kalbarczyk, Zbigniew T., Iyer, Ravishankar K. |
Conference Name | Proceedings of the Symposium and Bootcamp on the Science of Security |
Publisher | ACM |
Conference Location | New York, NY, USA |
ISBN Number | 978-1-4503-4277-3 |
Keywords | pubcrawl, Resiliency, Scalability, signature based defense |
Abstract | This paper presents a framework for (1) generating variants of known attacks, (2) replaying attack variants in an isolated environment and, (3) validating detection capabilities of attack detection techniques against the variants. Our framework facilitates reproducible security experiments. We generated 648 variants of three real-world attacks (observed at the National Center for Supercomputing Applications at the University of Illinois). Our experiment showed the value of generating attack variants by quantifying the detection capabilities of three detection methods: a signature-based detection technique, an anomaly-based detection technique, and a probabilistic graphical model-based technique. |
URL | http://doi.acm.org/10.1145/2898375.2898392 |
DOI | 10.1145/2898375.2898392 |
Citation Key | cao_framework_2016 |