Uncertainty and Risk Management in Cyber Situational Awareness

摘要: Handling cyber threats unavoidably needs to deal with both uncertain and imprecise information. What we can observe as potential malicious activities seldom give us 100% confidence on important questions care about, e.g. what machines are compromised damage has been incurred. In security planning, need information how likely a vulnerability lead successful compromise better balance functionality, performance, ease of use. These at best qualitative often vague imprecise. situational awareness, have rely such imperfect detect real attacks prevent an attack from happening through appropriate risk management. This chapter surveys existing technologies in handling uncertainty management awareness.