On the Fly Design and Co-simulation of Responses Against Simultaneous Attacks

摘要: The growth of critical information systems in size and complexity has driven the research community to propose automated response systems. These must cope with steady progress attacks’ sophistication, coordination effectiveness. Unfortunately, existing still handle attacks independently, suffering thereby from (i) efficiency issues against coordinated (e.g. DDoS), (ii) conflicts between parallel responses, (iii) unexpected side effects responses on system. We, thus, this paper a new model simultaneous threats. Our is dynamically designed based definition capability-aware logic anticorrelation, modeled using Situation Calculus (SC) language. Even though can prevent or reduce an attack scenario, it may also have system unintentionally ease one attackers its scenario. We address issue by proposing co-simulator SC planning capabilities. This considers each candidate apart reasons, current system’s attackers’ state, assess achieved risk mitigation protected Experimentations were led highlight benefits our solution.