Sharing and replaying attack scenarios with Moirai - Université de Rennes Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

Sharing and replaying attack scenarios with Moirai

Résumé

Datasets are necessary for evaluating and comparing security solutions. Today, the most well-known public dataset is still the oft-decried IDEVAL dataset. Even if we don't take into account all the inherent shortcomings of this dataset, the fact that it dates back to 1999 means its relevance is all but lost. Without a public dataset, new security solutions cannot be compared to existing ones. In this article, we argue for the need of a public and modern dataset for the evaluation of security solutions. Moreover, we argue that traditional datasets are too restrictive in the approaches they allow. Thus, we present Moirai. Instead of sharing datasets, Moirai shares the scenarios used to create datasets. This allows for the creation of complex scenarios which could, for example, represent an Advanced Persistent Threat (APT). By sharing the scenarios, Moirai allows solutions based on disparate ideas to be compared.
Fichier principal
Vignette du fichier
paper.pdf (93.71 Ko) Télécharger le fichier
poster.pdf (115.18 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01533275 , version 1 (06-06-2017)

Identifiants

  • HAL Id : hal-01533275 , version 1

Citer

Guillaume Brogi, Valérie Viet Triem Tong. Sharing and replaying attack scenarios with Moirai. RESSI 2017: Rendez-vous de la Recherche et de l'Enseignement de la Sécurité des Systèmes d'Information, May 2017, Autrans, France. ⟨hal-01533275⟩
451 Consultations
235 Téléchargements

Partager

Gmail Facebook X LinkedIn More