Bayesian Network Models in Cyber Security: A Systematic Review

Bayesian Network Models in Cyber Security: A Systematic Review

Chockalingam, S. (TU Delft Safety and Security Science)
Pieters, W. (TU Delft Safety and Security Science)
Herdeiro Teixeira, A.M. (TU Delft Information and Communication Technology)
van Gelder, P.H.A.J.M. (TU Delft Safety and Security Science)

Lipmaa, Helger (editor)
Mitrokotsa, Aikaterini (editor)
Matulevicius, Raimundas (editor)

2017

Bayesian Networks (BNs) are an increasingly popular modelling technique in cyber security especially due to their capability to overcome data limitations. This is also instantiated by the growth of BN models development in cyber security. However, a comprehensive comparison and analysis of these models is missing. In this paper, we conduct a systematic review of the scientific literature and identify 17 standard BN models in cyber security. We analyse these models based on 9 different criteria and identify important patterns in the use of these models. A key outcome is that standard BNs are noticeably used for problems especially associated with malicious insiders. This study points out the core range of problems that were tackled using standard BN models in cyber security, and illuminates key research gaps.

Bayesian attack graph
Bayesian Network
Cyber security
Information security
Insider threat

http://resolver.tudelft.nl/uuid:0eba4009-a229-49b9-bec1-c930c6a40b5b

https://doi.org/10.1007/978-3-319-70290-2_7

Springer

978-3-319-70289-6

Proceedings of the Nordic Conference on Secure IT Systems (Nordic 2017), 10674

The 22nd Nordic Conference on Secure IT Systems, 2017-11-08 → 2017-11-10, Dorpat Convention Centre, Tartu, Estonia

Lecture Notes in Computer Science, 0302-9743, 10674

Institutional Repository

conference paper

© 2017 S. Chockalingam, W. Pieters, A.M. Herdeiro Teixeira, P.H.A.J.M. van Gelder