Understanding How Components of Organisations Contribute to Attacks

被引:0
|
作者
Gu, Min [1 ]
Aslanyan, Zaruhi [1 ]
Probst, Christian W. [1 ]
机构
[1] Tech Univ Denmark, Lyngby, Denmark
来源
关键词
D O I
10.1007/978-3-319-47560-8_4
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Attacks on organisations today explore many different layers, including buildings infrastructure, IT infrastructure, and human factor - the physical, virtual, and social layer. Identifying possible attacks, understanding their impact, and attributing their origin and contributing factors is difficult. Recently, system models have been used for automatically identifying possible attacks on the modelled organisation. The generated attacks consider all three layers, making the contribution of building infrastructure, computer infrastructure, and humans ( insiders and outsiders) explicit. However, this contribution is only visible in the attack trees as part of the performed steps; it cannot be mapped back to the model directly since the actions usually involve several elements ( attacker and targeted actor or asset). Especially for large attack trees, understanding the relations between several model components quickly results in a large quantity of interrelations, which are hard to grasp. In this work we present several approaches for visualising attributes of attacks such as likelihood of success, impact, and required time or skill level. The resulting visualisations provide a link between attacks on an organisations and the contribution of parts of an organisation to the attack and its impact.
引用
收藏
页码:54 / 66
页数:13
相关论文
共 50 条
  • [1] How evaluations contribute to data literacy in organisations
    Ottmann, Sebastian
    Helten, Anne-Kathrin
    John, Dennis
    [J]. ZEITSCHRIFT FUR EVALUATION, 2024, 23 (01):
  • [2] Understanding how the components of a synthetic turf system contribute to increased surface temperature
    Petrass, Lauren A.
    Twomey, Dara M.
    Harvey, Jack T.
    [J]. ENGINEERING OF SPORT 10, 2014, 72 : 943 - 948
  • [3] QUALITY IMPROVEMENT How organisations contribute to improving the quality of healthcare
    Fulop, Naomi J.
    Ramsay, Angus I. G.
    [J]. BMJ-BRITISH MEDICAL JOURNAL, 2019, 365
  • [4] How psychoanalysis can contribute to understanding racism
    Numa, Sharon
    [J]. INTERNATIONAL JOURNAL OF PSYCHOANALYSIS, 2023, 104 (05): : 860 - 868
  • [5] How Psychoanalysis can Contribute to Understanding Racism
    Bianchi, Maria Giovanna
    [J]. JOURNAL OF ANALYTICAL PSYCHOLOGY, 2024,
  • [6] How neuropathology can contribute to the understanding of dementia
    Gelpi, Ellen
    [J]. NEURODEGENERATIVE DISEASE MANAGEMENT, 2016, 6 (03) : 183 - 186
  • [7] Understanding how opioids contribute to reward and analgesia
    Fields, Howard L.
    [J]. REGIONAL ANESTHESIA AND PAIN MEDICINE, 2007, 32 (03) : 242 - 246
  • [8] Social listening: a potential game changer in reputation management How big data analysis can contribute to understanding stakeholders' views on organisations
    Westermann, Arne
    Forthmann, Joerg
    [J]. CORPORATE COMMUNICATIONS, 2021, 26 (01) : 2 - 22
  • [9] How do collaborative practices contribute to innovation in large organisations? The case of hackathons
    Granados, Cristian
    Pareja-Eastaway, Montserrat
    [J]. INNOVATION-ORGANIZATION & MANAGEMENT, 2019, 21 (04): : 487 - 505
  • [10] How geodesy can contribute to the understanding and prediction of earthquakes
    Giuliano Francesco Panza
    Antonella Peresan
    Fernando Sansò
    Mattia Crespi
    Augusto Mazzoni
    Andrea Nascetti
    [J]. Rendiconti Lincei. Scienze Fisiche e Naturali, 2018, 29 : 81 - 93