HAL 9000: a Risk Manager for ITSs

• Tipo: Artigo em Livro de Atas de Conferência Internacional
• Data: 2024

Autores

Freitas, T (Autor) Outra; Novo, C (Autor) Outra; Soares, J (Autor) FCUP; Ines Dutra (Autor) FCUP; Manuel E Correia (Autor) FCUP; Shariati, B (Autor) Outra; Martins, R (Autor) FCUP

Ata de Conferência Internacional

Título: 2024 IEEE 6TH INTERNATIONAL CONFERENCE ON TRUST, PRIVACY AND SECURITY IN INTELLIGENT SYSTEMS, AND APPLICATIONS, TPS-ISA

Páginas: 322-331

6th International Conference on Trust Privacy and Security in Intelligent Systems and Applications

Washington, DC, OCT 28-31, 2024

Indexação

ISI Web of Knowledge - 0 Citações

Scopus - 0 Citações

Crossref

Classificação Científica

CORDIS: Ciências Físicas > Ciência de computadores

FOS: Ciências exactas e naturais > Ciências da computação e da informação

Outras Informações

ID Authenticus: P-00Z-MWX

DOI: 10.1109/tps-isa62245.2024.00044

Abstract (EN): HAL 9000 is an Intrusion Tolerant Systems (ITSs) Risk Manager, which assesses configuration risks against potential intrusions. It utilizes gathered threat knowledge and remains operational, even in the absence of updated information. Based on its advice, the ITSs can dynamically and proactively adapt to recent threats to minimize and mitigate future intrusions from malicious adversaries. Our goal is to reduce the risk linked to the exploitation of recently uncovered vulnerabilities that have not been classified and/or do not have a script to reproduce the exploit, considering the potential that they may have already been exploited as zero-day exploits. Our experiments demonstrate that the proposed solution can effectively learn and replicate National Vulnerability Database's evaluation process with 99% accuracy.

Idioma: Inglês

Tipo (Avaliação Docente): Científica

Nº de páginas: 10