HAL 9000: a Risk Manager for ITSs
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2023
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866908276296253440 |
|---|---|
| author | Freitas, Tadeu Novo, Carlos Soares, Joao Dutra, Ines Correia, Manuel E. Shariati, Behnam Martins, Rolando |
| author_facet | Freitas, Tadeu Novo, Carlos Soares, Joao Dutra, Ines Correia, Manuel E. Shariati, Behnam Martins, Rolando |
| contents | HAL 9000 is an Intrusion Tolerant Systems (ITSs) Risk Manager, which assesses configuration risks against potential intrusions. It utilizes gathered threat knowledge and remains operational, even in the absence of updated information. Based on its advice, the ITSs can dynamically and proactively adapt to recent threats to minimize and mitigate future intrusions from malicious adversaries. Our goal is to reduce the risk linked to the exploitation of recently uncovered vulnerabilities that have not been classified and/or do not have a script to reproduce the exploit, considering the potential that they may have already been exploited as zero-day exploits. Our experiments demonstrate that the proposed solution can effectively learn and replicate National Vulnerability Database's evaluation process with 99% accuracy. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2311_09449 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | HAL 9000: a Risk Manager for ITSs Freitas, Tadeu Novo, Carlos Soares, Joao Dutra, Ines Correia, Manuel E. Shariati, Behnam Martins, Rolando Cryptography and Security Artificial Intelligence Operating Systems HAL 9000 is an Intrusion Tolerant Systems (ITSs) Risk Manager, which assesses configuration risks against potential intrusions. It utilizes gathered threat knowledge and remains operational, even in the absence of updated information. Based on its advice, the ITSs can dynamically and proactively adapt to recent threats to minimize and mitigate future intrusions from malicious adversaries. Our goal is to reduce the risk linked to the exploitation of recently uncovered vulnerabilities that have not been classified and/or do not have a script to reproduce the exploit, considering the potential that they may have already been exploited as zero-day exploits. Our experiments demonstrate that the proposed solution can effectively learn and replicate National Vulnerability Database's evaluation process with 99% accuracy. |
| title | HAL 9000: a Risk Manager for ITSs |
| topic | Cryptography and Security Artificial Intelligence Operating Systems |
| url | https://arxiv.org/abs/2311.09449 |