Data fusion for improved situational understanding

摘要

Situational understanding is a difficult problem in cybersecurity where the challenge lies in effective integration of evidence reported by multiple sources or sensors monitoring cyberspace. While sensor diversity contributes to better coverage of attack space, it makes analysis of diverse data more difficult. Our work employs a possibilistic approach to intelligent fusion of data from multiple sources to better understand security situation of information systems. This paper summarizes our previous work in this area and presents goal of our ongoing work.