"Considering technical and financial impact in the selection of security countermeasures against Advanced Persistent Threats (APTs)"
| Title | "Considering technical and financial impact in the selection of security countermeasures against Advanced Persistent Threats (APTs)" |
| Publication Type | Conference Paper |
| Year of Publication | 2015 |
| Authors | G. G. Granadillo, J. Garcia-Alfaro, H. Debar, C. Ponchel, L. R. Martin |
| Conference Name | 2015 7th International Conference on New Technologies, Mobility and Security (NTMS) |
| Date Published | July |
| Publisher | IEEE |
| ISBN Number | 978-1-4799-8784-9 |
| Accession Number | 15475683 |
| Keywords | advanced persistent threats, APT, computer network security, cost-benefit analysis, invasive software, Investment, Malware, malware attacks, Mathematical model, Measurement, Organizations, pubcrawl170101, return on response investment, risk management, RORI index, security countermeasures |
| Abstract | This paper presents a model to evaluate and select security countermeasures from a pool of candidates. The model performs industrial evaluation and simulations of the financial and technical impact associated to security countermeasures. The financial impact approach uses the Return On Response Investment (RORI) index to compare the expected impact of the attack when no response is enacted against the impact after applying security countermeasures. The technical impact approach evaluates the protection level against a threat, in terms of confidentiality, integrity, and availability. We provide a use case on malware attacks that shows the applicability of our model in selecting the best countermeasure against an Advanced Persistent Threat. |
| URL | http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=7266480&isnumber=7266450 |
| DOI | 10.1109/NTMS.2015.7266480 |
| Citation Key | 7266480 |