Keynote Address: Theory and Models for Cyber Situational Awareness

No ratings

Presented at IFIPWG11.3 2019 by

Sushil Jajodia

Today, when a security incident happens, the top three questions a cyber operation center would ask are: What has happened? Why did it happen? What should I do? Answers to the first two questions form the core of cyber situation awareness (SA). Whether the last question can be satisfactorily addressed is largely dependent on the cyber SA capability of an enterprise. This talk will cover mathematical models, scalable methods, and automated tools that attempt to efficiently answer the first two questions.