@InProceedings{Kiesling2014,
  author =    {Kiesling, E. and Ekelhart, A. and Grill, B. and Stummer, C. and Strauss, C.},
  title =     {Evolving Secure Information Systems through Attack Simulation},
  booktitle = {47th Hawaii International Conference on System Sciences (HICSS 2014)},
  year =      {2014},
  pages =     {4868--4877},
  month =     {1},
  abstract =  {In this paper, we introduce a simulation-based, evolutionary approach for analyzing and improving the security of complex information systems. Rather than following a purely technical approach, we bring in a social and behavioral perspective through a combination of conceptual security knowledge modeling, behavioral modeling of threat agents, simulation of attacks, and evolutionary optimization. Based on results from numerous attack simulations for various internal and external attackers, metrics such as impact on confidentiality, availability, and integrity of the simulated attacks are monitored and efficient sets of security controls with respect to multiple risk, cost and benefit objectives are determined. We describe the developed approach as well as a prototypical implementation and demonstrate its applicability by means of an illustrative example.},
  doi =       {10.1109/HICSS.2014.597},
  file =      {:EvolvingSecureInformationSystems.pdf:PDF},
  keywords =  {evolutionary computation;security of data;attack simulation;behavioral perspective;complex information system security;conceptual security knowledge modeling;evolutionary optimization;multiple risk;secure information system;social perspective;threat agent;Abstracts;Availability;Context;Educational institutions;Information systems;Optimization;Security}
}

{"_id":"QPZvR4ZQ3sQb6qk5a","bibbaseid":"kiesling-ekelhart-grill-stummer-strauss-evolvingsecureinformationsystemsthroughattacksimulation-2014","authorIDs":["5d4d349416bededa01000025","EMTLSftrqyuA8D2ca","T5swLaE8Dfx9DTajW"],"author_short":["Kiesling, E.","Ekelhart, A.","Grill, B.","Stummer, C.","Strauss, C."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","author":[{"propositions":[],"lastnames":["Kiesling"],"firstnames":["E."],"suffixes":[]},{"propositions":[],"lastnames":["Ekelhart"],"firstnames":["A."],"suffixes":[]},{"propositions":[],"lastnames":["Grill"],"firstnames":["B."],"suffixes":[]},{"propositions":[],"lastnames":["Stummer"],"firstnames":["C."],"suffixes":[]},{"propositions":[],"lastnames":["Strauss"],"firstnames":["C."],"suffixes":[]}],"title":"Evolving Secure Information Systems through Attack Simulation","booktitle":"47th Hawaii International Conference on System Sciences (HICSS 2014)","year":"2014","pages":"4868–4877","month":"1","abstract":"In this paper, we introduce a simulation-based, evolutionary approach for analyzing and improving the security of complex information systems. Rather than following a purely technical approach, we bring in a social and behavioral perspective through a combination of conceptual security knowledge modeling, behavioral modeling of threat agents, simulation of attacks, and evolutionary optimization. Based on results from numerous attack simulations for various internal and external attackers, metrics such as impact on confidentiality, availability, and integrity of the simulated attacks are monitored and efficient sets of security controls with respect to multiple risk, cost and benefit objectives are determined. We describe the developed approach as well as a prototypical implementation and demonstrate its applicability by means of an illustrative example.","doi":"10.1109/HICSS.2014.597","file":":EvolvingSecureInformationSystems.pdf:PDF","keywords":"evolutionary computation;security of data;attack simulation;behavioral perspective;complex information system security;conceptual security knowledge modeling;evolutionary optimization;multiple risk;secure information system;social perspective;threat agent;Abstracts;Availability;Context;Educational institutions;Information systems;Optimization;Security","bibtex":"@InProceedings{Kiesling2014,\n author = {Kiesling, E. and Ekelhart, A. and Grill, B. and Stummer, C. and Strauss, C.},\n title = {Evolving Secure Information Systems through Attack Simulation},\n booktitle = {47th Hawaii International Conference on System Sciences (HICSS 2014)},\n year = {2014},\n pages = {4868--4877},\n month = {1},\n abstract = {In this paper, we introduce a simulation-based, evolutionary approach for analyzing and improving the security of complex information systems. Rather than following a purely technical approach, we bring in a social and behavioral perspective through a combination of conceptual security knowledge modeling, behavioral modeling of threat agents, simulation of attacks, and evolutionary optimization. Based on results from numerous attack simulations for various internal and external attackers, metrics such as impact on confidentiality, availability, and integrity of the simulated attacks are monitored and efficient sets of security controls with respect to multiple risk, cost and benefit objectives are determined. We describe the developed approach as well as a prototypical implementation and demonstrate its applicability by means of an illustrative example.},\n doi = {10.1109/HICSS.2014.597},\n file = {:EvolvingSecureInformationSystems.pdf:PDF},\n keywords = {evolutionary computation;security of data;attack simulation;behavioral perspective;complex information system security;conceptual security knowledge modeling;evolutionary optimization;multiple risk;secure information system;social perspective;threat agent;Abstracts;Availability;Context;Educational institutions;Information systems;Optimization;Security}\n}\n\n","author_short":["Kiesling, E.","Ekelhart, A.","Grill, B.","Stummer, C.","Strauss, C."],"key":"Kiesling2014","id":"Kiesling2014","bibbaseid":"kiesling-ekelhart-grill-stummer-strauss-evolvingsecureinformationsystemsthroughattacksimulation-2014","role":"author","urls":{},"keyword":["evolutionary computation;security of data;attack simulation;behavioral perspective;complex information system security;conceptual security knowledge modeling;evolutionary optimization;multiple risk;secure information system;social perspective;threat agent;Abstracts;Availability;Context;Educational institutions;Information systems;Optimization;Security"],"metadata":{"authorlinks":{"ekelhart, a":"https://andrenios.github.io/"}}},"bibtype":"inproceedings","biburl":"https://github.com/andrenios/cv/raw/master/ekelhart.bib","creationDate":"2019-08-09T08:53:40.751Z","downloads":0,"keywords":["evolutionary computation;security of data;attack simulation;behavioral perspective;complex information system security;conceptual security knowledge modeling;evolutionary optimization;multiple risk;secure information system;social perspective;threat agent;abstracts;availability;context;educational institutions;information systems;optimization;security"],"search_terms":["evolving","secure","information","systems","through","attack","simulation","kiesling","ekelhart","grill","stummer","strauss"],"title":"Evolving Secure Information Systems through Attack Simulation","year":2014,"dataSources":["DsYG2QtXBi9CZZRqf"]}