Towards building actionable indicators of compromise based on a collaboration model

Izzat Alsmadi; Nandi Leslie; Charles Kamhoua

doi:10.1117/12.2520198

10 May 2019 Towards building actionable indicators of compromise based on a collaboration model

Izzat Alsmadi, Nandi Leslie, Charles Kamhoua

Proceedings Volume 11006, Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications; 110061G (2019) https://doi.org/10.1117/12.2520198
Event: SPIE Defense + Commercial Sensing, 2019, Baltimore, MD, United States

Abstract

In cyber and threat intelligence areas, Indicators of Compromise (IOC) can be used as inputs to security controls to guide defense and mitigation activities. We propose a collaboration model in certain attributes in IOC model related to the (1) seriousness of the threat that the IOC triggers and (2) the confidence in the IOC detection or prediction are built based on a community or collaborative model. In this model, users can subscribe or introduce new IOCs based on their own/systems’ exposures or analysis. They can also assess IOCs created by others and vote to continuously change IOC seriousness and confidence values.

Conference Presentation

Citation Download Citation

Izzat Alsmadi, Nandi Leslie, and Charles Kamhoua "Towards building actionable indicators of compromise based on a collaboration model", Proc. SPIE 11006, Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications, 110061G (10 May 2019); https://doi.org/10.1117/12.2520198

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available