AIRSE : an approach for attack intention recognition based on similarity of evidences
Sensitive information can be exposed to critical risks when communicated through computer networks. The ability of attackers in hiding their attacks' intention obstructs existing protection systems to early prevent their attacks and avoid any possible sabotage in network systems. In this paper,...
| Main Authors: | , |
|---|---|
| Format: | Conference or Workshop Item |
| Language: | English English |
| Published: |
EAI
2017
|
| Subjects: | |
| Online Access: | http://umpir.ump.edu.my/id/eprint/27010/ http://umpir.ump.edu.my/id/eprint/27010/1/AIRSE%20-%20an%20approach%20for%20attack%20intention%20recognition%20based.pdf http://umpir.ump.edu.my/id/eprint/27010/7/AIRSE%20an%20approach%20for%20attack%20intention%20recognition%20based%20on%20similarity%20of%20evidences.pdf |
| _version_ | 1848822682013925376 |
|---|---|
| author | Ahmed, Abdulghani Ali Noorul Ahlami, Kamarul Zaman |
| author_facet | Ahmed, Abdulghani Ali Noorul Ahlami, Kamarul Zaman |
| author_sort | Ahmed, Abdulghani Ali |
| building | UMP Institutional Repository |
| collection | Online Access |
| description | Sensitive information can be exposed to critical risks when communicated through computer networks. The ability of attackers in hiding their attacks' intention obstructs existing protection systems to early prevent their attacks and avoid any possible sabotage in network systems. In this paper, we propose a similarity approach called Attack Intention Recognition based on Similarity of Evidences (AIRSE). In particular, the proposed approach AIRSE aims to recognize attack intention in real time. It classifies attacks according to their characteristics and uses the similar metric method to identify attacks motives and predict their intentions. In this study, attack intentions are categorized into specific and general intentions. General intentions are recognized by investigating violations against the security metrics of confidentiality, integrity, availability, and authenticity. Specific intentions are recognized by investigating the network attacks used to achieve a violation. The obtained results demonstrate that the proposed approach is capable of investigating similarity of attack signatures and recognizing the intentions of network attack. |
| first_indexed | 2025-11-15T02:45:07Z |
| format | Conference or Workshop Item |
| id | ump-27010 |
| institution | Universiti Malaysia Pahang |
| institution_category | Local University |
| language | English English |
| last_indexed | 2025-11-15T02:45:07Z |
| publishDate | 2017 |
| publisher | EAI |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | ump-270102019-12-18T02:14:56Z http://umpir.ump.edu.my/id/eprint/27010/ AIRSE : an approach for attack intention recognition based on similarity of evidences Ahmed, Abdulghani Ali Noorul Ahlami, Kamarul Zaman QA76 Computer software Sensitive information can be exposed to critical risks when communicated through computer networks. The ability of attackers in hiding their attacks' intention obstructs existing protection systems to early prevent their attacks and avoid any possible sabotage in network systems. In this paper, we propose a similarity approach called Attack Intention Recognition based on Similarity of Evidences (AIRSE). In particular, the proposed approach AIRSE aims to recognize attack intention in real time. It classifies attacks according to their characteristics and uses the similar metric method to identify attacks motives and predict their intentions. In this study, attack intentions are categorized into specific and general intentions. General intentions are recognized by investigating violations against the security metrics of confidentiality, integrity, availability, and authenticity. Specific intentions are recognized by investigating the network attacks used to achieve a violation. The obtained results demonstrate that the proposed approach is capable of investigating similarity of attack signatures and recognizing the intentions of network attack. EAI 2017-03-09 Conference or Workshop Item PeerReviewed pdf en http://umpir.ump.edu.my/id/eprint/27010/1/AIRSE%20-%20an%20approach%20for%20attack%20intention%20recognition%20based.pdf pdf en http://umpir.ump.edu.my/id/eprint/27010/7/AIRSE%20an%20approach%20for%20attack%20intention%20recognition%20based%20on%20similarity%20of%20evidences.pdf Ahmed, Abdulghani Ali and Noorul Ahlami, Kamarul Zaman (2017) AIRSE : an approach for attack intention recognition based on similarity of evidences. In: 1st EAI International Conference on Computer Science and Engineering, COMPSE 2016 , 11-12 November 2016 , Penang, Malaysia. . ISBN 9781631901362 (Published) http://dx.doi.org/10.4108/eai.27-2-2017.152343 |
| spellingShingle | QA76 Computer software Ahmed, Abdulghani Ali Noorul Ahlami, Kamarul Zaman AIRSE : an approach for attack intention recognition based on similarity of evidences |
| title | AIRSE : an approach for attack intention recognition based on similarity of evidences |
| title_full | AIRSE : an approach for attack intention recognition based on similarity of evidences |
| title_fullStr | AIRSE : an approach for attack intention recognition based on similarity of evidences |
| title_full_unstemmed | AIRSE : an approach for attack intention recognition based on similarity of evidences |
| title_short | AIRSE : an approach for attack intention recognition based on similarity of evidences |
| title_sort | airse : an approach for attack intention recognition based on similarity of evidences |
| topic | QA76 Computer software |
| url | http://umpir.ump.edu.my/id/eprint/27010/ http://umpir.ump.edu.my/id/eprint/27010/ http://umpir.ump.edu.my/id/eprint/27010/1/AIRSE%20-%20an%20approach%20for%20attack%20intention%20recognition%20based.pdf http://umpir.ump.edu.my/id/eprint/27010/7/AIRSE%20an%20approach%20for%20attack%20intention%20recognition%20based%20on%20similarity%20of%20evidences.pdf |