Functional requirements of situational awareness in computer network security

The underpinning of situational awareness in computer networks is to identify adversaries, estimate impact of attacks, evaluate risks, understand situations and make sound decisions on how to protect valued assets swiftly and accurately. SA also underscores situation assessment in order to make accu...

Full description

Saved in:
Bibliographic Details
Main Author: Onwubiko, Cyril
Format: Conference Proceeding
Language:English
Subjects:
Aggregates
Automation
Computer Network Defence
Computer networks
Computer security
Data security
Data visualization
Information security
Intrusion detection
Monitoring
Network Security
NSSA requirements
Protection
Situational Awareness
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:The underpinning of situational awareness in computer networks is to identify adversaries, estimate impact of attacks, evaluate risks, understand situations and make sound decisions on how to protect valued assets swiftly and accurately. SA also underscores situation assessment in order to make accurate forecast in dynamic and complex environments. In this paper, situational awareness in computer network security is investigated. Functional attributes of situational awareness in computer network security are discussed: dynamism and complexity, automation, realtime processing, multisource data fusion, heterogeneity, security visualisation, decision control, risk assessment, resolution, forecasting and prediction.
DOI:10.1109/ISI.2009.5137305