Human-as-a-security-sensor for harvesting threat intelligence | Veröffentlichte Version Download ( Anderes | 1MB) | Lizenz: Creative Commons Namensnennung 4.0 International |
Human-as-a-security-sensor for harvesting threat intelligence
Vielberth, Manfred, Menges, Florian und Pernul, Günther (2019) Human-as-a-security-sensor for harvesting threat intelligence. Cybersecurity 2 (23).Veröffentlichungsdatum dieses Volltextes: 03 Dez 2019 14:31
Artikel
DOI zum Zitieren dieses Dokuments: 10.5283/epub.41113
Zusammenfassung
Humans are commonly seen as the weakest link in corporate information security. This led to a lot of effort being put into security training and awareness campaigns, which resulted in employees being less likely the target of successful attacks. Existing approaches, however, do not tap the full potential that can be gained through these campaigns. On the one hand, human perception offers an ...
Humans are commonly seen as the weakest link in corporate information security. This led to a lot of effort being put into security training and awareness campaigns, which resulted in employees being less likely the target of successful attacks. Existing approaches, however, do not tap the full potential that can be gained through these campaigns. On the one hand, human perception offers an additional source of contextual information for detected incidents, on the other hand it serves as information source for incidents that may not be detectable by automated procedures. These approaches only allow a text-based reporting of basic incident information. A structured recording of human delivered information that also provides compatibility with existing SIEM systems is still missing. In this work, we propose an approach, which allows humans to systematically report perceived anomalies or incidents in a structured way. Our approach furthermore supports the integration of such reports into analytics systems. Thereby, we identify connecting points to SIEM systems, develop a taxonomy for structuring elements reportable by humans acting as a security sensor and develop a structured data format to record data delivered by humans. A prototypical human-as-a-security-sensor wizard applied to a real-world use-case shows our proof of concept.
Alternative Links zum Volltext
Beteiligte Einrichtungen
Details
| Dokumentenart | Artikel | ||||
| Titel eines Journals oder einer Zeitschrift | Cybersecurity | ||||
| Verlag: | Springer Singapore | ||||
|---|---|---|---|---|---|
| Band: | 2 | ||||
| Nummer des Zeitschriftenheftes oder des Kapitels: | 23 | ||||
| Datum | 22 Oktober 2019 | ||||
| Institutionen | Wirtschaftswissenschaften > Institut für Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul) Informatik und Data Science > Fachbereich Wirtschaftsinformatik > Lehrstuhl für Wirtschaftsinformatik I - Informationssysteme (Prof. Dr. Günther Pernul) | ||||
| Identifikationsnummer |
| ||||
| Stichwörter / Keywords | Cyber threat intelligence; Human awareness; Human-as-a-security-sensor; Security information and event management (SIEM) | ||||
| Dewey-Dezimal-Klassifikation | 000 Informatik, Informationswissenschaft, allgemeine Werke > 004 Informatik | ||||
| Status | Veröffentlicht | ||||
| Begutachtet | Ja, diese Version wurde begutachtet | ||||
| An der Universität Regensburg entstanden | Ja | ||||
| URN der UB Regensburg | urn:nbn:de:bvb:355-epub-411130 | ||||
| Dokumenten-ID | 41113 |
Downloadstatistik
Downloadstatistik