HAL 9000: a Risk Manager for ITSs

• Type: Article in International Conference Proceedings Book
• Date: 2024

Authors

Freitas, T (Author) Other; Novo, C (Author) Other; Soares, J (Author) FCUP; Ines Dutra (Author) FCUP; Manuel E Correia (Author) FCUP; Shariati, B (Author) Other; Martins, R (Author) FCUP

Conference proceedings International

Title: 2024 IEEE 6TH INTERNATIONAL CONFERENCE ON TRUST, PRIVACY AND SECURITY IN INTELLIGENT SYSTEMS, AND APPLICATIONS, TPS-ISA

Pages: 322-331

6th International Conference on Trust Privacy and Security in Intelligent Systems and Applications

Washington, DC, OCT 28-31, 2024

Indexing

ISI Web of Knowledge - 0 Citations

Scopus - 0 Citations

Crossref

Scientific classification

CORDIS: Physical sciences > Computer science

FOS: Natural sciences > Computer and information sciences

Other information

Authenticus ID: P-00Z-MWX

DOI: 10.1109/tps-isa62245.2024.00044

Abstract (EN): HAL 9000 is an Intrusion Tolerant Systems (ITSs) Risk Manager, which assesses configuration risks against potential intrusions. It utilizes gathered threat knowledge and remains operational, even in the absence of updated information. Based on its advice, the ITSs can dynamically and proactively adapt to recent threats to minimize and mitigate future intrusions from malicious adversaries. Our goal is to reduce the risk linked to the exploitation of recently uncovered vulnerabilities that have not been classified and/or do not have a script to reproduce the exploit, considering the potential that they may have already been exploited as zero-day exploits. Our experiments demonstrate that the proposed solution can effectively learn and replicate National Vulnerability Database's evaluation process with 99% accuracy.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 10