More Like this

1. Grouping and Determining Perceived Severity of Cyber-Attack Consequences: Gaining Information Needed to Sonify Cyber-Attacks

   https://doi.org/10.1007/s12193-022-00397-z  

   Jones, Keith S. ; Lodinger, Natalie R. ; Widlus, Benjamin P. ; Namin, Akbar Siami ; Maw, Emily ; Armstrong, Miriam ( December 2022 , Journal on Multimodal User Interfaces)
2. Predictive Cyber Defense Remediation against Advanced Persistent Threat in Cyber-Physical Systems

   https://doi.org/10.1109/ICCCN54977.2022.9868886  

   Hasan, Kamrul ; Shetty, Sachin ; Islam, Tariqul ; Ahmed, Imtiaz ( July 2022 , 2022 International Conference on Computer Communications and Networks (ICCCN))
3. $\mathtt{FlipIn}$ : A Game-Theoretic Cyber Insurance Framework for Incentive-Compatible Cyber Risk Management of Internet of Things

   https://doi.org/10.1109/TIFS.2019.2955891  

   Zhang, Rui ; Zhu, Quanyan ( January 2020 , IEEE Transactions on Information Forensics and Security)

   null (Ed.)
4. Evaluating the effects of cyber-attacks on cyber physical systems using a hardware-in-the-loop simulation testbed

   https://doi.org/10.1109/RWEEK.2017.8088669  

   Potteiger, Bradley ; Emfinger, William ; Neema, Himanshu ; Koutosukos, Xenofon ; Tang, CheeYee ; Stouffer, Keith ( September 2017 , 2017 Resilience Week (RWS))

   Cyber-Physical Systems (CPS) consist of embedded computers with sensing and actuation capability, and are integrated into and tightly coupled with a physical system. Because the physical and cyber components of the system are tightly coupled, cyber-security is important for ensuring the system functions properly and safely. However, the effects of a cyberattack on the whole system may be difficult to determine, analyze, and therefore detect and mitigate. This work presents a model based software development framework integrated with a hardware-in-the-loop (HIL) testbed for rapidly deploying CPS attack experiments. The framework provides the ability to emulate low level attacks and obtain platform specific performance measurements that are difficult to obtain in a traditional simulation environment. The framework improves the cybersecurity design process which can become more informed and customized to the production environment of a CPS. The developed framework is illustrated with a case study of a railway transportation system. 

   more » « less
5. Data Analytics for Cyber Risk Analysis Utilizing Cyber Incident Datasets

   https://doi.org/10.1109/SIEDS52267.2021.9483743  

   Portalatin, Melissa ; Keskin, Omer ; Malneedi, Sneha ; Raza, Owais ; Tatar, Unal ( July 2021 , 2021 Systems and Information Engineering Design Symposium (SIEDS))

   The imperative factors of cybersecurity within institutions have become prevalent due to the rise of cyber-attacks. Cybercriminals strategically choose their targets and develop several different techniques and tactics that are used to exploit vulnerabilities throughout an entire institution. With the thorough analysis practices being used in recent policy and regulation of cyber incident reports, it has been claimed that data breaches have increased at alarming rates rapidly. Thus, capturing the trends of cyber-attacks strategies, exploited vulnerabilities, and reoccurring patterns as insight to better cybersecurity. This paper seeks to discover the possible threats that influence the relationship between the human component and cybersecurity posture. Along with this, we use the Vocabulary for Event Recording and Incident Sharing (VERIS) database to analyze previous cyber incidents to advance risk management that will benefit the institutional level of cybersecurity. We elaborate on the rising concerns of external versus internal factors that potentially put institutions at risk for exploiting vulnerabilities and conducting an exploratory data analysis that articulates the understanding of detrimental monetary and data loss in recent cyber incidents. The human component of this research attributes to the perceptive of the most common cause within cyber incidents, human error. With these concerns on the rise, we found contributing factors with the use of a risk-based approach and thorough analysis of databases, which will be used to improve the practical consensus of cybersecurity. Our findings can be of use to all institutions in search of useful insight to better their risk-management planning skills and failing elements of their cybersecurity. 

   more » « less