Perceiving and understanding cyber-attacks can be a difficult task, and more effective
techniques are needed to aid cyber-attack perception. Attack modelling techniques (AMTs) …

A network based Intrusion Detection System (IDS) gathers and analyzes network packets
and report possible low level security violations to a system administrator. In a large network …

Perceiving and understanding cyber-attacks can be a difficult task. This problem is widely
recognized and welldocumented, and more effective techniques are needed to aid cyber …

Intrusion analysis is essential for cybersecurity, but oftentimes, the overwhelming number of
false alerts issued by security appliances can prove to be a considerable hurdle. Machine …

Event Correlation used to be a widely used technique for interpreting alert logs and
discovering network attacks. However, due to the scale and complexity of today's networks …

This paper presents the Scanning, Vulnerabilities, Exploits and Detection tool (SVED).
SVED facilitates reliable and repeatable cyber security experiments by providing a means to …

Intrusion analysis and incident management remains a difficult problem in practical network
security defense. The root cause of this problem is the large rate of false positives in the …

This chapter presents the design and initial simulation results for a prototype moving-target
defense (MTD) system, whose goal is to significantly increase the difficulty of attacks on …

Attack graphs and attack trees are a popular method of mathematically and visually
representing the sequence of events that lead to a successful cyber-attack. Despite their …

Future-oriented networking infrastructures are characterized by highly dynamic Streaming
Data (SD) whose volume, speed and number of dimensions increased significantly over the …