Analyzing threat agents and their attributes

Stilianos Vidalis; Andrew Jones

Analyzing threat agents and their attributes

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

8 Citations (Scopus)

Abstract

Modern risk assessment techniques recognize that there is a need to perform a threat assessment in order to identify the threats that a system is facing, and the agents that are able to manifest them. Most of them though do not incorporate the process of identifying and analyzing threat agents. Gathering IDS data and analyzing them is a challenge on its own, but identifying threat agents, and analyzing their attributes is a different game altogether. Is an agent motivated enough to pursue his/her target? Does the agent have the technical capability and the knowledge required to exploit a vulnerability Our intention is not to put labels in certain categories of people, rather to try and understand these and stimulate the discussion between all those of good faith.

Original language	English
Title of host publication	4th European Conference on Information Warfare and Security 2005, ECIW 2005
Place of Publication	UK
Publisher	Academic Conferences International (ACI)
Pages	369-379
Number of pages	11
ISBN (Print)	9781905305032
Publication status	Published - 11 Jul 2005
Event	4th European Conference on Information Warfare and Security 2005, ECIW 2005 - Glamorgan, United Kingdom Duration: 11 Jul 2005 → 12 Jul 2005

Conference

Conference	4th European Conference on Information Warfare and Security 2005, ECIW 2005
Country/Territory	United Kingdom
City	Glamorgan
Period	11/07/05 → 12/07/05

Keywords

Threat agent
Threat agent categorization
Threat agent identification and analysis
Threat agent metrics

Cite this

@inproceedings{7c3f4127174744b28205b50fed8eac4e,

title = "Analyzing threat agents and their attributes",

abstract = "Modern risk assessment techniques recognize that there is a need to perform a threat assessment in order to identify the threats that a system is facing, and the agents that are able to manifest them. Most of them though do not incorporate the process of identifying and analyzing threat agents. Gathering IDS data and analyzing them is a challenge on its own, but identifying threat agents, and analyzing their attributes is a different game altogether. Is an agent motivated enough to pursue his/her target? Does the agent have the technical capability and the knowledge required to exploit a vulnerability Our intention is not to put labels in certain categories of people, rather to try and understand these and stimulate the discussion between all those of good faith.",

keywords = "Threat agent, Threat agent categorization, Threat agent identification and analysis, Threat agent metrics",

author = "Stilianos Vidalis and Andrew Jones",

year = "2005",

month = jul,

day = "11",

language = "English",

isbn = "9781905305032",

pages = "369--379",

booktitle = "4th European Conference on Information Warfare and Security 2005, ECIW 2005",

publisher = "Academic Conferences International (ACI)",

address = "United Kingdom",

note = "4th European Conference on Information Warfare and Security 2005, ECIW 2005 ; Conference date: 11-07-2005 Through 12-07-2005",

}

TY - GEN

T1 - Analyzing threat agents and their attributes

AU - Vidalis, Stilianos

AU - Jones, Andrew

PY - 2005/7/11

Y1 - 2005/7/11

N2 - Modern risk assessment techniques recognize that there is a need to perform a threat assessment in order to identify the threats that a system is facing, and the agents that are able to manifest them. Most of them though do not incorporate the process of identifying and analyzing threat agents. Gathering IDS data and analyzing them is a challenge on its own, but identifying threat agents, and analyzing their attributes is a different game altogether. Is an agent motivated enough to pursue his/her target? Does the agent have the technical capability and the knowledge required to exploit a vulnerability Our intention is not to put labels in certain categories of people, rather to try and understand these and stimulate the discussion between all those of good faith.

AB - Modern risk assessment techniques recognize that there is a need to perform a threat assessment in order to identify the threats that a system is facing, and the agents that are able to manifest them. Most of them though do not incorporate the process of identifying and analyzing threat agents. Gathering IDS data and analyzing them is a challenge on its own, but identifying threat agents, and analyzing their attributes is a different game altogether. Is an agent motivated enough to pursue his/her target? Does the agent have the technical capability and the knowledge required to exploit a vulnerability Our intention is not to put labels in certain categories of people, rather to try and understand these and stimulate the discussion between all those of good faith.

KW - Threat agent

KW - Threat agent categorization

KW - Threat agent identification and analysis

KW - Threat agent metrics

UR - http://www.scopus.com/inward/record.url?scp=84873824907&partnerID=8YFLogxK

M3 - Conference contribution

AN - SCOPUS:84873824907

SN - 9781905305032

SP - 369

EP - 379

BT - 4th European Conference on Information Warfare and Security 2005, ECIW 2005

PB - Academic Conferences International (ACI)

CY - UK

T2 - 4th European Conference on Information Warfare and Security 2005, ECIW 2005

Y2 - 11 July 2005 through 12 July 2005

ER -

Analyzing threat agents and their attributes

Abstract

Conference

Keywords

Other files and links

Fingerprint

Cite this