B2CSM: Blockchain-Based Automated and Robust Cyber Security Management
B2CSM: Blockchain-Based Automated and Robust Cyber Security Management
Embedded Files
We initiate the study on the problem of automated and robust Cyber Security Management (CSM). We exemplify the problem by investigating how CSM should respond to the discovery of cyber intelligence that identifies new attackers, victims, or defense capabilities. Given the complexity of CSM, we divide it into three classes, referred to as Network-centric (N-CSM), Tools-centric (T-CSM), and Application-centric (A-CSM). These lead to a range of functions for examining whether, and to what extent, a network has been compromised. Moreover, we propose to incorporate blockchain (via Hyperledger Fabric) to build a decentralized CSM system, dubbed B2CSM, that ensures the retrieval of valid invocation results for CSM purposes. We also integrate B2CSM with a decentralized storage network (DSN), instantiated by InterPlanetary File System (IPFS), to reduce on-chain storage costs without hindering its robustness. We present the design and implementation of the prototype B2CSM system. Experiments with real-world datasets show that the CSM solutions and system are effective and efficient.
We initiate the study on the problem of automated and robust Cyber Security Management (CSM). We exemplify the problem by investigating how CSM should respond to the discovery of cyber intelligence that identifies new attackers, victims, or defense capabilities. Given the complexity of CSM, we divide it into three classes, referred to as Network-centric (N-CSM), Tools-centric (T-CSM), and Application-centric (A-CSM). These lead to a range of functions for examining whether, and to what extent, a network has been compromised. Moreover, we propose to incorporate blockchain (via Hyperledger Fabric) to build a decentralized CSM system, dubbed B2CSM, that ensures the retrieval of valid invocation results for CSM purposes. We also integrate B2CSM with a decentralized storage network (DSN), instantiated by InterPlanetary File System (IPFS), to reduce on-chain storage costs without hindering its robustness. We present the design and implementation of the prototype B2CSM system. Experiments with real-world datasets show that the CSM solutions and system are effective and efficient.
Figure: Data Structure for Application-centric CSM
Figure: B2CSM Architecture
Remarks:
Remarks:
This was a group project led by Dr. Shouhuai Xu and other collaborators. I was part of the design team to develop Application-centric CSM functions and Queries, design algorithms to execute those queries on bi-partite graph-based threat intelligence data for retrospective analysis of a given network using Ethereum Blockchain-based distributed system.
This was a group project led by Dr. Shouhuai Xu and other collaborators. I was part of the design team to develop Application-centric CSM functions and Queries, design algorithms to execute those queries on bi-partite graph-based threat intelligence data for retrospective analysis of a given network using Ethereum Blockchain-based distributed system.
Publications:
Publications:
Songlin He, Eric Ficke, Mir Mehedi Ahsan Pritom, Huashan Chen, Qiang Tang, Qian Chen, Marcus Pendleton, Laurent Njilla, Shouhuai Xu, "Blockchain-based automated and robust cyber security management'', Journal of Parallel and Distributed Computing, Vol 163, 2022, Pages 62-82,ISSN 0743-7315, https://doi.org/10.1016/j.jpdc.2022.01.002.
Page updated
Google Sites
Report abuse