Detailed Information on Publication Record

@inproceedings{39066,
   author = {Husák, Martin and Čeleda, Pavel},
   address = {Budapest, Hungary},
   booktitle = {NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium},
   doi = {http://dx.doi.org/10.1109/NOMS47738.2020.9110472},
   keywords = {intrusion detection;alert correlation;information sharing;collaboration;prediction;situational awareness},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {Budapest, Hungary},
   isbn = {978-1-7281-4973-8},
   pages = {1-6},
   publisher = {IEEE},
   title = {Predictions of Network Attacks in Collaborative Environment},
   url = {https://ieeexplore.ieee.org/document/9110472},
   year = {2020}
}

TY  - JOUR
ID  - 39066
AU  - Husák, Martin - Čeleda, Pavel
PY  - 2020
TI  - Predictions of Network Attacks in Collaborative Environment
PB  - IEEE
CY  - Budapest, Hungary
SN  - 9781728149738
KW  - intrusion detection;alert correlation;information sharing;collaboration;prediction;situational awareness
UR  - https://ieeexplore.ieee.org/document/9110472
N2  - This paper is a digest of the thesis on predicting cyber attacks in a collaborative environment. While previous works mostly focused on predicting attacks as seen from a single observation point, we proposed taking advantage of collaboration and exchange of intrusion detection alerts among organizations and networks. Thus, we can observe the cyber attack on a large scale and predict the next action of an adversary and its target. The thesis follows the three levels of cyber situational awareness: perception, comprehension, and projection. In the perception phase, we discuss the improvements of intrusion detection systems that allow for sharing intrusion detection alerts and their correlation. In the comprehension phase, we employed data mining to discover frequent attack patterns. In the projection phase, we present the analytical framework for the predictive analysis of the alerts backed by data mining and contemporary data processing approaches. The results are shown from experimental evaluation in the security alert sharing platform SABU, where real-world alerts from Czech academic and commercial networks are shared. The thesis is accompanied by the implementation of the analytical framework and a dataset that provides a baseline for future work.
ER  - 

HUSÁK, Martin and Pavel ČELEDA. Predictions of Network Attacks in Collaborative Environment. Online. In \textit{NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium}. Budapest, Hungary: IEEE, 2020, p.~1-6. ISBN~978-1-7281-4973-8. Available from: https://dx.doi.org/10.1109/NOMS47738.2020.9110472.