English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

CySecTool is a tool that finds a cost-optimal security controls portfolio ina given budget for a probabilistic attack graph. A portfolio is a set ofcounter-measures, or controls, against vulnerabilities adopted for a computersystem, while an attack graph is a type of a threat scenario model. In anattack graph, nodes are privilege states of the attacker, edges arevulnerabilities escalating privileges, and controls reduce the probabilities ofsome vulnerabilities being exploited. The tool builds on an optimisationalgorithm published by Khouzani et al. (2019), enabling a user to quicklycreate, edit, and incrementally improve models, analyse results for givenportfolios and display the best solutions for all possible budgets in the formof a Pareto frontier. A case study was performed utilising a system graph andsuspected attack paths prepared by industrial security engineers based on anindustrial source with which they work. The goal of the case study is to modela supervisory control and data acquisition (SCADA) industrial system which, dueto having the potential to harm people, necessitates strong protection whilenot allowing the use of typical penetration tools like vulnerability scanners.Results are analysed to show how a cyber-security analyst would use CySecToolto store cyber-security intelligence and draw further conclusions.

Optimal security hardening over a probabilistic attack graph: a case study of an industrial control system using the CySecTool tool