Abstract:Critical infrastructures are increasingly reliant on information and communications technology (ICT) for more efficient operations, which, at the same time, exposes them to cyber threats. As the frequency and severity of cyberattacks are increasing, so are the costs of critical infrastructure security. Efficient allocation of resources is thus a crucial issue for cybersecurity. A common practice in managing cyber threats is to conduct a qualitative analysis of individual attack scenarios through risk matrices, prioritizing the scenarios according to their perceived urgency and addressing them in order until all the resources available for cybersecurity are spent. Apart from methodological caveats, this approach may lead to suboptimal resource allocations, given that potential synergies between different attack scenarios and among available security measures are not taken into consideration. To overcome this shortcoming, we propose a quantitative framework that features: (1) a more holistic picture of the cybersecurity landscape, represented as a Bayesian network (BN) that encompasses multiple attack scenarios and thus allows for a better appreciation of vulnerabilities; and (2) a multiobjective optimization model built on top of the said BN that explicitly represents multiple dimensions of the potential impacts of successful cyberattacks. Our framework adopts a broader perspective than the standard cost-benefit analysis and allows the formulation of more nuanced security objectives. We also propose a computationally efficient algorithm that identifies the set of Pareto-optimal portfolios of security measures that simultaneously minimize various types of expected cyberattack impacts, while satisfying budgetary and other constraints. We illustrate our framework with a case study of electric power grids.

A Bayesian Attack-Network Modeling Approach to Mitigating Malware-Based Banking Cyberattacks

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Statistical Modeling of Computer Malware Propagation Dynamics in Cyberspace

Bayesian Learned Models Can Detect Adversarial Malware For Free

A Bayesian-network-based cybersecurity adversarial risk analysis framework with numerical examples

Advanced security testing using a cyber‐attack forecasting model: A case study of financial institutions

Understanding and Mitigating Banking Trojans: From Zeus to Emotet

Routing the Cyber-Attack Path with the Bayesian Network Deducing Approach

Advanced Cybersecurity Enhancement through Mathematical Models: A Comprehensive Approach Using Statistical Methods, Cryptographic Techniques, and Machine Learning Algorithms (SVM, Random Forest, and Neural Networks) for Behavior-Based Malware Detection

A Bayesian Framework for the Analysis and Optimal Mitigation of Cyber Threats to Cyber-Physical Systems

A Cyber Kill Chain Based Taxonomy of Banking Trojans for Evolutionary Computational Intelligence

Analyzing the risk and financial impact of phishing attacks using a knowledge based approach

Comprehensive Botnet Detection by Mitigating Adversarial Attacks, Navigating the Subtleties of Perturbation Distances and Fortifying Predictions with Conformal Layers

A Markov Game Model for AI-based Cyber Security Attack Mitigation

Dynamic Malware Mitigation Strategies for IoT Networks: A Mathematical Epidemiology Approach

Ransomware threat mitigation through network traffic analysis and machine learning techniques

Cyber Network Resilience against Self-Propagating Malware Attacks

Exploitation of Human Trust, Curiosity and Ignorance by Malware

Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models

How hard can it be? Quantifying MITRE attack campaigns with attack trees and cATM logic

Attacking Machine Learning models as part of a cyber kill chain