Visible to the public Analysis of Adversarial Movement Through Characteristics of Graph Topological Ordering

TitleAnalysis of Adversarial Movement Through Characteristics of Graph Topological Ordering
Publication TypeConference Paper
Year of Publication2018
AuthorsAsadi, Nima, Rege, Aunshul, Obradovic, Zoran
Conference Name2018 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)
Date Publishedjun
Keywordsadaptive human behavior, adversarial movement complexity, adversarial team, Computer crime, cyberattacks, decision making, dynamic decision-making, graph theory, graph topological ordering, Heating systems, Human Behavior, Human Behavior and Cybersecurity, integrated circuits, mixed methods, movement association, network theory, network theory (graphs), pubcrawl, security of data, social network, Sorting, Tools, topological sort networks, Training
AbstractCapturing the patterns in adversarial movement can provide valuable information regarding how the adversaries progress through cyberattacks. This information can be further employed for making comparisons and interpretations of decision making of the adversaries. In this study, we propose a framework based on concepts of social networks to characterize and compare the patterns, variations and shifts in the movements made by an adversarial team during a real-time cybersecurity exercise. We also explore the possibility of movement association with the skill sets using topological sort networks. This research provides preliminary insight on adversarial movement complexity and linearity and decision-making as cyberattacks unfold.
DOI10.1109/CyberSA.2018.8551361
Citation Keyasadi_analysis_2018