A genetic epidemiology approach to cyber-security.

ABSTRACT: While much attention has been paid to the vulnerability of computer networks to node and link failure, there is limited systematic understanding of the factors that determine the likelihood that a node (computer) is compromised. We therefore collect threat log data in a university network to study the patterns of threat activity for individual hosts. We relate this information to the properties of each host as observed through network-wide scans, establishing associations between the network services a host is running and the kinds of threats to which it is susceptible. We propose a methodology to associate services to threats inspired by the tools used in genetics to identify statistical associations between mutations and diseases. The proposed approach allows us to determine probabilitie

SUBMITTER: Gil S 

PROVIDER: S-EPMC4100021 | biostudies-literature | 2014 Jul

REPOSITORIES: biostudies-literature