Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory.

Yoram J. Meijaard; Peter-Paul Meiler; Luca Allodi

doi:10.1109/EuroSPW54576.2021.00026

Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory.

Yoram J. Meijaard, Peter-Paul Meiler, Luca Allodi

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

1 Citation (Scopus)

Abstract

Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender's critical infrastructure, processes and societal function.

Original language	English
Title of host publication	Proceedings - 2021 IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2021
Pages	178-190
Number of pages	13
ISBN (Electronic)	9781665410120
DOIs	https://doi.org/10.1109/EuroSPW54576.2021.00026
Publication status	Published - Sept 2021

Bibliographical note

DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.

Keywords

Advanced Persistent Threat
Critical infrastructure
Cyber Situational Awareness
Data Model

Access to Document

10.1109/EuroSPW54576.2021.00026

Cite this

@inproceedings{1ebdd7e395584c27880e6b8bd1283cdc,

title = "Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory.",

abstract = "Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender's critical infrastructure, processes and societal function.",

keywords = "Advanced Persistent Threat, Critical infrastructure, Cyber Situational Awareness, Data Model",

author = "Meijaard, {Yoram J.} and Peter-Paul Meiler and Luca Allodi",

note = "DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.",

year = "2021",

month = sep,

doi = "10.1109/EuroSPW54576.2021.00026",

language = "English",

pages = "178--190",

booktitle = "Proceedings - 2021 IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2021",

}

Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory. / Meijaard, Yoram J.; Meiler, Peter-Paul; Allodi, Luca.

Proceedings - 2021 IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2021. 2021. p. 178-190.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory.

AU - Meijaard, Yoram J.

AU - Meiler, Peter-Paul

AU - Allodi, Luca

N1 - DBLP License: DBLP's bibliographic metadata records provided through http://dblp.org/ are distributed under a Creative Commons CC0 1.0 Universal Public Domain Dedication. Although the bibliographic metadata records are provided consistent with CC0 1.0 Dedication, the content described by the metadata records is not. Content may be subject to copyright, rights of privacy, rights of publicity and other restrictions.

PY - 2021/9

Y1 - 2021/9

N2 - Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender's critical infrastructure, processes and societal function.

AB - Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender's critical infrastructure, processes and societal function.

KW - Advanced Persistent Threat

KW - Critical infrastructure

KW - Cyber Situational Awareness

KW - Data Model

UR - http://www.scopus.com/inward/record.url?scp=85119047223&partnerID=8YFLogxK

U2 - 10.1109/EuroSPW54576.2021.00026

DO - 10.1109/EuroSPW54576.2021.00026

M3 - Conference contribution

SP - 178

EP - 190

BT - Proceedings - 2021 IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2021

ER -

Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory.

Abstract

Bibliographical note

Keywords

Access to Document

Other files and links

Fingerprint

Cite this