Attack visualisation for cyber-security situation awareness

摘要

This paper illustrates how Situation Awareness measurement techniques can be transferred and adopted to a Cloud Computing network environment, specifically concerning the Intrusion Detection field. Bearing in mind the rise of Cloud Infrastructures and the importance of Cyber Security, this topic is critical. In this paper the relationship between Situation Awareness, decision-making and the most known measurements of Situation Awareness is being presented. Moreover, an application of some techniques through an attack-visualisation case study is being provided. This study has the form of an on-line questionnaire and it's consisted of two main parts; the first part is related to general knowledge questions, which provide information that can also help in the categorization of the population. The second part is examining the three levels of Situation Awareness theory and a video/image representation is a key technique. Finally, in this paper the results of the study are being discussed and some key conclusions are being provided.