Integration of external data sources with cyber security data warehouse

Bogdan D. Czejdo; Michael D. Iannacone; Robert A. Bridges; Erik M. Ferragut; John R. Goodall

doi:10.1145/2602087.2602098

Integration of external data sources with cyber security data warehouse

Bogdan D. Czejdo, Michael D. Iannacone, Robert A. Bridges, Erik M. Ferragut, John R. Goodall

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

4 Scopus citations

Abstract

In this paper we discuss problems related to integration of external knowledge and data components with a cyber security data warehouse to improve situational understanding of enterprise networks. More specifically, network assessment and trend analysis can be enhanced by knowledge about most current vulnerabilities and external network events. The cyber security data warehouse can be modeled as a hierarchical graph of aggregations that captures data at multiple scales. Nodes of the graph, which are summarization tables, can be linked to external sources of information. We discuss problems related to timely information about vulnerabilities and how to integrate vulnerability ontology with cyber security network data. Copyright is held by the owner/author(s).

Original language	English
Title of host publication	Proceedings of 2014 9th Annual Cyber and Information Security Research Conference, CISRC 2014
Publisher	Association for Computing Machinery
Pages	49-52
Number of pages	4
ISBN (Print)	9781450328128
DOIs	https://doi.org/10.1145/2602087.2602098
State	Published - 2014
Event	9th Annual Cyber and Information Security Research Conference, CISRC 2014 - Oak Ridge, TN, United States Duration: Apr 8 2014 → Apr 10 2014

Publication series

Name	ACM International Conference Proceeding Series

Conference

Conference	9th Annual Cyber and Information Security Research Conference, CISRC 2014
Country/Territory	United States
City	Oak Ridge, TN
Period	04/8/14 → 04/10/14

Keywords

Aggregation
Anomaly detection
Cyber security
Natural language processing
Network intrusion
Situational understanding
Vulnerability
Vulnerability ontology

Access to Document

10.1145/2602087.2602098

Cite this

Czejdo, B. D., Iannacone, M. D., Bridges, R. A., Ferragut, E. M., & Goodall, J. R. (2014). Integration of external data sources with cyber security data warehouse. In Proceedings of 2014 9th Annual Cyber and Information Security Research Conference, CISRC 2014 (pp. 49-52). (ACM International Conference Proceeding Series). Association for Computing Machinery. https://doi.org/10.1145/2602087.2602098

@inproceedings{944a300f3c164b46a0f5c61f7ccee594,

title = "Integration of external data sources with cyber security data warehouse",

abstract = "In this paper we discuss problems related to integration of external knowledge and data components with a cyber security data warehouse to improve situational understanding of enterprise networks. More specifically, network assessment and trend analysis can be enhanced by knowledge about most current vulnerabilities and external network events. The cyber security data warehouse can be modeled as a hierarchical graph of aggregations that captures data at multiple scales. Nodes of the graph, which are summarization tables, can be linked to external sources of information. We discuss problems related to timely information about vulnerabilities and how to integrate vulnerability ontology with cyber security network data. Copyright is held by the owner/author(s).",

keywords = "Aggregation, Anomaly detection, Cyber security, Natural language processing, Network intrusion, Situational understanding, Vulnerability, Vulnerability ontology",

author = "Czejdo, {Bogdan D.} and Iannacone, {Michael D.} and Bridges, {Robert A.} and Ferragut, {Erik M.} and Goodall, {John R.}",

year = "2014",

doi = "10.1145/2602087.2602098",

language = "English",

isbn = "9781450328128",

series = "ACM International Conference Proceeding Series",

publisher = "Association for Computing Machinery",

pages = "49--52",

booktitle = "Proceedings of 2014 9th Annual Cyber and Information Security Research Conference, CISRC 2014",

note = "9th Annual Cyber and Information Security Research Conference, CISRC 2014 ; Conference date: 08-04-2014 Through 10-04-2014",

}

Czejdo, BD, Iannacone, MD, Bridges, RA, Ferragut, EM & Goodall, JR 2014, Integration of external data sources with cyber security data warehouse. in Proceedings of 2014 9th Annual Cyber and Information Security Research Conference, CISRC 2014. ACM International Conference Proceeding Series, Association for Computing Machinery, pp. 49-52, 9th Annual Cyber and Information Security Research Conference, CISRC 2014, Oak Ridge, TN, United States, 04/8/14. https://doi.org/10.1145/2602087.2602098

Integration of external data sources with cyber security data warehouse. / Czejdo, Bogdan D.; Iannacone, Michael D.; Bridges, Robert A. et al.
Proceedings of 2014 9th Annual Cyber and Information Security Research Conference, CISRC 2014. Association for Computing Machinery, 2014. p. 49-52 (ACM International Conference Proceeding Series).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Integration of external data sources with cyber security data warehouse

AU - Czejdo, Bogdan D.

AU - Iannacone, Michael D.

AU - Bridges, Robert A.

AU - Ferragut, Erik M.

AU - Goodall, John R.

PY - 2014

Y1 - 2014

N2 - In this paper we discuss problems related to integration of external knowledge and data components with a cyber security data warehouse to improve situational understanding of enterprise networks. More specifically, network assessment and trend analysis can be enhanced by knowledge about most current vulnerabilities and external network events. The cyber security data warehouse can be modeled as a hierarchical graph of aggregations that captures data at multiple scales. Nodes of the graph, which are summarization tables, can be linked to external sources of information. We discuss problems related to timely information about vulnerabilities and how to integrate vulnerability ontology with cyber security network data. Copyright is held by the owner/author(s).

AB - In this paper we discuss problems related to integration of external knowledge and data components with a cyber security data warehouse to improve situational understanding of enterprise networks. More specifically, network assessment and trend analysis can be enhanced by knowledge about most current vulnerabilities and external network events. The cyber security data warehouse can be modeled as a hierarchical graph of aggregations that captures data at multiple scales. Nodes of the graph, which are summarization tables, can be linked to external sources of information. We discuss problems related to timely information about vulnerabilities and how to integrate vulnerability ontology with cyber security network data. Copyright is held by the owner/author(s).

KW - Aggregation

KW - Anomaly detection

KW - Cyber security

KW - Natural language processing

KW - Network intrusion

KW - Situational understanding

KW - Vulnerability

KW - Vulnerability ontology

UR - http://www.scopus.com/inward/record.url?scp=84905457975&partnerID=8YFLogxK

U2 - 10.1145/2602087.2602098

DO - 10.1145/2602087.2602098

M3 - Conference contribution

AN - SCOPUS:84905457975

SN - 9781450328128

T3 - ACM International Conference Proceeding Series

SP - 49

EP - 52

BT - Proceedings of 2014 9th Annual Cyber and Information Security Research Conference, CISRC 2014

PB - Association for Computing Machinery

T2 - 9th Annual Cyber and Information Security Research Conference, CISRC 2014

Y2 - 8 April 2014 through 10 April 2014

ER -

Integration of external data sources with cyber security data warehouse

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this