论文标题
网络行动:一种基于Stix的工具,用于复杂模型中的网络威胁智能
cyberaCTIve: a STIX-based Tool for Cyber Threat Intelligence in Complex Models
论文作者
论文摘要
网络威胁智能(CTI)是实用的现实信息,其目的是评估网络物理系统(CPS)的威胁。共享CTI的实用符号是Stix。 Stix提供创建,可视化和共享模型的设施;但是,即使是中等简单的项目也可以在Stix中表示为一个相当复杂的图表,这表明将CTI传播到多个简单的子项目中。我们的工具旨在在简化不可行的情况下在上下文中增强基于Stix的建模任务。示例可以是微电网,而且通常是智能电网。
Cyber threat intelligence (CTI) is practical real-world information that is collected with the purpose of assessing threats in cyber-physical systems (CPS). A practical notation for sharing CTI is STIX. STIX offers facilities to create, visualise and share models; however, even a moderately simple project can be represented in STIX as a quite complex graph, suggesting to spread CTI across multiple simpler sub-projects. Our tool aims to enhance the STIX-based modelling task in contexts when such simplifications are infeasible. Examples can be the microgrid and, more in general, the smart grid.