网络攻击的关系框架:来自多阶段事件的经验证据
Mikel Ferrer-Oliva1, José-Amelio Medina-Merodio1, José-Javier Martínez-Herraiz1
1Departamento de Ciencias de la Computación, Universidad de Alcalá, 28871 Madrid, Spain.
Sensors (Basel, Switzerland)
|December 11, 2025
概括
本研究引入了网络攻击的新关系分类学,绘制威胁进展和干预点的地图. 它通过澄清升级路径和改善事件响应对齐来增强网络安全.
科学领域:
- 网络安全 网络安全
- 信息安全 信息安全
- 计算机科学 计算机科学
背景情况:
- 目前的静态网络攻击分类法与复杂的多阶段威胁作斗争.
- 需要更动态和灵活的网络威胁分类模型.
研究的目的:
- 基于记录的事件,提出网络攻击的关系分类法.
- 使用依赖矩阵和定向图,编码八个网络攻击组之间的直接过渡.
- 为了确保可追溯到MITRE ATT&CK框架.
主要方法:
- 基于记录的网络攻击事件开发了一个关系分类学.
- 使用依赖矩阵和定向图表来表示八个攻击组之间的过渡.
- 通过独立的专家小组验证了分类学,以评估清晰度和实用性.
主要成果:
- 在网络攻击群体中确定了一致的过渡模式和可重现的升级路线.
- 确定了与特定检测和控制活动相关的关键干预点.
- 为网络攻击的进展和干预策略提供了一个操作地图.
结论:
- 关系分类学澄清了网络攻击的升级路径和相互依存关系.
- 它加强了安全监控,事件响应和威胁情报之间的协调.
- 为预测升级和专注于关键监测点提供了一个操作结构.
相关概念视频
Bullying
8.8K
A modern form of aggression is bullying. As you learn in your study of child development, socializing and playing with other children is beneficial for children’s psychological development. However, as you may have experienced as a child, not all play behavior has positive outcomes. Some children are aggressive and want to play roughly. Other children are selfish and do not want to share toys. One form of negative social interactions among children that has become a national concern is...
8.8K
Steps in Outbreak Investigation
468
In the ever-evolving field of public health, statistical analysis serves as a cornerstone for understanding and managing disease outbreaks. By leveraging various statistical tools, health professionals can predict potential outbreaks, analyze ongoing situations, and devise effective responses to mitigate impact. For that to happen, there are a few possible stages of the analysis:
468
Types of Reports II: Incident or Occurrence Report
1.2K
An Incident or Occurrence Report in a healthcare setting is a crucial document used to record any unexpected occurrence that may or may not have affected a patient, employee, or visitor. Such reports are critical to improving patient safety and include all details leading up to and including the event.
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
1.2K
Collisions in Multiple Dimensions: Introduction
6.5K
It is far more common for collisions to occur in two dimensions; that is, the initial velocity vectors are neither parallel nor antiparallel to each other. Let's see what complications arise from this. The first idea is that momentum is a vector. Like all vectors, it can be expressed as a sum of perpendicular components (usually, though not always, an x-component and a y-component, and a z-component if necessary). Thus, when the statement of conservation of momentum is written for a...
6.5K
Elastic Collisions: Case Study
20.1K
Elastic collision of a system demands conservation of both momentum and kinetic energy. To solve problems involving one-dimensional elastic collisions between two objects, the equations for conservation of momentum and conservation of internal kinetic energy can be used. For the two objects, the sum of momentum before the collision equals the total momentum after the collision. An elastic collision conserves internal kinetic energy, and so the sum of kinetic energies before the collision equals...
20.1K
Relationship Growth
179
Interpersonal relationships progress through stages, beginning with awareness and moving toward mutuality, where emotional connections deepen. While many relationships remain at moderate levels of mutuality, deeper connections form through self-disclosure, trust, and interdependence.Self-DisclosureSelf-disclosure involves revealing personal information, starting with surface-level details and gradually progressing to more intimate content. As trust grows, individuals feel more comfortable...
179

