Cyber reasoning with argumentation: Abstracting from incomplete and contradictory evidence

摘要: Information given to system administrators is often incomplete and contradictory. Even worse, are required adhere organizational policies, which frequently contain conflicting goals. While prior work in security has sought alleviate these concerns, much of it strives identify attacks intrusions with approaches that require complete knowledge for analysis. In this paper, we present a framework addresses the challenges facing by using formal argumentation generate big-picture conclusions regarding system. Unlike other schemes, excels situations where information To motivate our approach, detail scenario inspired real-world data taken from U.C. Davis environment.