The Evolution of the CRUSOE Toolset: Enhancing Decision Support
in Network Security Management

D 2024

The Evolution of the CRUSOE Toolset: Enhancing Decision Support in Network Security Management

HUSÁK, Martin; Lukáš SADLEK; Martin HESKO; Vít ŠEBELA; Stanislav ŠPAČEK et al.

Základní údaje

Originální název

The Evolution of the CRUSOE Toolset: Enhancing Decision Support in Network Security Management

Autoři

HUSÁK, Martin ; Lukáš SADLEK; Martin HESKO; Vít ŠEBELA a Stanislav ŠPAČEK

Vydání

New York, NY, 2024 20th International Conference on Network and Service Management (CNSM), od s. 1-3, 3 s. 2024

Nakladatel

IEEE

Další údaje

Jazyk

angličtina

Typ výsledku

Stať ve sborníku

Obor

10200 1.2 Computer and information sciences

Stát vydavatele

Spojené státy

Utajení

není předmětem státního či obchodního tajemství

Forma vydání

elektronická verze "online"

Odkazy

URL, URL

Označené pro přenos do RIV

Ano

Kód RIV

RIV/00216224:14610/24:00137384

Organizační jednotka

Ústav výpočetní techniky

ISBN

979-8-3315-0515-8

ISSN

Klíčová slova anglicky

decision support;network security management;incident response;orchestration;automation

Štítky

rivok

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 31. 3. 2025 18:25, RNDr. Martin Husák, Ph.D.

Anotace

V originále

This demo paper presents the recent development of the CRUSOE toolset. CRUSOE enables cyber situational awareness and provides decision support for network security management. The first public version from 2021 used a combination of active and passive network monitoring to enumerate cyber assets and discover their vulnerabilities, visualize the collected data in a dashboard, conduct a risk assessment to recommend the most resilient infrastructure configuration, and facilitate attack mitigation. It also used novel approaches, such as a graph database for storing the data on cyber assets, which essentially became a knowledge graph for network security management. In the recent development, we managed to automate the deployment of CRUSOE via Ansible and Docker. Further, we implemented additional recommender systems and attack impact assessment capabilities and their visualizations. Finally, several sample datasets were created to facilitate the demonstration of the toolset and to enable testing it without one's data.

Návaznosti

EH22_010/0003229, projekt VaV

Název: MSCAfellow5_MUNI

MUNI/A/1586/2023, interní kód MU

Název: Aplikovaný výzkum na FI: Forenzní aspekty kritických infrastruktur, aplikovaná kryptografie, kyberbezpečnostní cvičení, algoritmy plánování v logistice a pro zpracování dat z fyzikálních sensorů

Investor: Masarykova univerzita, Aplikovaný výzkum na FI: Forenzní aspekty kritických infrastruktur, aplikovaná kryptografie, kyberbezpečnostní cvičení, algoritmy plánování v logistice a pro zpracování dat z fyzikálních sensorů

Přiložené soubory

2024-CNSM-Evolution-of-CRUSOE-toolset-paper.pdf Verze souboru

2024-CNSM-Evolution-of-CRUSOE-toolset-slides.pdf

Citovat

HUSÁK, Martin; Lukáš SADLEK; Martin HESKO; Vít ŠEBELA a Stanislav ŠPAČEK. The Evolution of the CRUSOE Toolset: Enhancing Decision Support in Network Security Management. Online. In Varga, P; Celeda, P; Wauters, T; Tortonesi, M; Francois, J; Jimenez, JG. 2024 20th International Conference on Network and Service Management (CNSM). New York, NY: IEEE, 2024, s. 1-3. ISBN 979-8-3315-0515-8. Dostupné z: https://doi.org/10.23919/CNSM62983.2024.10814288.

@inproceedings{2445466,
   author = {Husák, Martin and Sadlek, Lukáš and Hesko, Martin and Šebela, Vít and Špaček, Stanislav},
   address = {New York, NY},
   booktitle = {2024 20th International Conference on Network and Service Management (CNSM)},
   doi = {https://doi.org/10.23919/CNSM62983.2024.10814288},
   editor = {Varga, P; Celeda, P; Wauters, T; Tortonesi, M; Francois, J; Jimenez, JG},
   keywords = {decision support;network security management;incident response;orchestration;automation},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {New York, NY},
   isbn = {979-8-3315-0515-8},
   pages = {1-3},
   publisher = {IEEE},
   title = {The Evolution of the CRUSOE Toolset: Enhancing Decision Support in Network Security Management},
   url = {https://opendl.ifip-tc6.org/db/conf/cnsm/cnsm2024/1571059474.pdf},
   year = {2024}
}

TY  - CONF
ID  - 2445466
AU  - Husák, Martin - Sadlek, Lukáš - Hesko, Martin - Šebela, Vít - Špaček, Stanislav
PY  - 2024
TI  - The Evolution of the CRUSOE Toolset: Enhancing Decision Support in Network Security Management
PB  - IEEE
CY  - New York, NY
SN  - 9798331505158
KW  - decision support;network security management;incident response;orchestration;automation
UR  - https://opendl.ifip-tc6.org/db/conf/cnsm/cnsm2024/1571059474.pdf
N2  - This demo paper presents the recent development of the CRUSOE toolset. CRUSOE enables cyber situational awareness and provides decision support for network security management. The first public version from 2021 used a combination of active and passive network monitoring to enumerate cyber assets and discover their vulnerabilities, visualize the collected data in a dashboard, conduct a risk assessment to recommend the most resilient infrastructure configuration, and facilitate attack mitigation. It also used novel approaches, such as a graph database for storing the data on cyber assets, which essentially became a knowledge graph for network security management. In the recent development, we managed to automate the deployment of CRUSOE via Ansible and Docker. Further, we implemented additional recommender systems and attack impact assessment capabilities and their visualizations. Finally, several sample datasets were created to facilitate the demonstration of the toolset and to enable testing it without one's data.
ER  -

HUSÁK, Martin; Lukáš SADLEK; Martin HESKO; Vít ŠEBELA a Stanislav ŠPAČEK. The Evolution of the CRUSOE Toolset: Enhancing Decision Support in Network Security Management. Online. In Varga, P; Celeda, P; Wauters, T; Tortonesi, M; Francois, J; Jimenez, JG. \textit{2024 20th International Conference on Network and Service Management (CNSM)}. New York, NY: IEEE, 2024, s.~1-3. ISBN~979-8-3315-0515-8. Dostupné z: https://doi.org/10.23919/CNSM62983.2024.10814288.

Přehled o publikaci