A process-oriented evaluation framework for cyber-attacker's capability
Baofeng Luo, Junhu Zhu · 2012
Accurately and reasonably evaluating cyber-attacker's capability can help to scientifically forecast following attacks in order to give tailor-made defense tactics.At present, the evaluation measures of cyber-attacker's capability are primarily based on attack effect and the related achievements are few.In this paper, we begin with the study of attack process, and then divide cyber-attacker's capability according to attack stages after analyzing each stage's features within the cyber-attack process.Subsequently, a process-oriented evaluation framework for cyber-attacker's capability is proposed.With the validation of an experiment, it is proved that this evaluation framework can make precise and reasonable evaluations of cyber-attackers' capability.