Imperial College London

Professor Emil Lupu

Faculty of EngineeringDepartment of Computing

Professor of Computer Systems
 
 
 
//

Contact

 

e.c.lupu Website

 
 
//

Location

 

564Huxley BuildingSouth Kensington Campus

//

Summary

 

Publications

Citation

BibTex format

@inproceedings{Karafili:2018:10.1007/978-3-030-03098-8_36,
author = {Karafili, E and Wang, L and Kakas, AC and Lupu, E},
doi = {10.1007/978-3-030-03098-8_36},
pages = {510--518},
title = {Helping forensic analysts to attribute cyber-attacks: An argumentation-based reasoner},
url = {http://dx.doi.org/10.1007/978-3-030-03098-8_36},
year = {2018}
}

RIS format (EndNote, RefMan)

TY  - CPAPER
AB - © Springer Nature Switzerland AG 2018. Discovering who performed a cyber-attack or from where it originated is essential in order to determine an appropriate response and future risk mitigation measures. In this work, we propose a novel argumentation-based reasoner for analyzing and attributing cyber-attacks that combines both technical and social evidence. Our reasoner helps the digital forensics analyst during the analysis of the forensic evidence by providing to the analyst the possible culprits of the attack, new derived evidence, hints about missing evidence, and insights about other paths of investigation. The proposed reasoner is flexible, deals with conflicting and incomplete evidence, and was tested on real cyber-attacks cases.
AU - Karafili,E
AU - Wang,L
AU - Kakas,AC
AU - Lupu,E
DO - 10.1007/978-3-030-03098-8_36
EP - 518
PY - 2018///
SN - 0302-9743
SP - 510
TI - Helping forensic analysts to attribute cyber-attacks: An argumentation-based reasoner
UR - http://dx.doi.org/10.1007/978-3-030-03098-8_36
UR - http://hdl.handle.net/10044/1/64369
ER -