On the Integration of Course of Action Playbooks into Shareable Cyber Threat Intelligence

Autor:	Vasileios Mavroeidis, Pavel Eis, Martin Zadnik, Marco Caselli, Bret Jordan
Jazyk:	angličtina
Rok vydání:	2021
Předmět:	FOS: Computer and information sciences Computer Science - Cryptography and Security cyber threat intelligence CTI cyber threat intelligence sharing security playbooks course of action CACAO playbooks MISP threat actor context ontology TAC ontology Cryptography and Security (cs.CR)
Zdroj:	IEEE International Conference on Big Data (Big Data) 2021 IEEE International Conference on Big Data (Big Data)
Popis:	Motivated by the introduction of CACAO, the first open standard that harmonizes the way we document courses of action in a machine-readable format for interoperability, and the benefits for cybersecurity operations derived from utilizing, and coupling and sharing course of action playbooks with cyber threat intelligence, we introduce a uniform metadata template that supports managing and integrating course of action playbooks into knowledge representation and knowledge management systems. We demonstrate the applicability of our approach through two use-case implementations. We utilize the playbook metadata template to introduce functionality and integrate course of action playbooks, such as CACAO, into the MISP threat intelligence platform and the OASIS Threat Actor Context ontology.
Databáze:	OpenAIRE
Externí odkaz:	https://explore.openaire.eu/search/publication?articleId=doi_dedup___::bf32b62e19e2a36f4507b2d239412645 http://arxiv.org/abs/2110.10540 Zobrazit plný text záznamu