A Trusted Knowledge Management System for Multi-layer Threat Analysis

In recent years, we have seen a surge of cybersecurity incidents ranging fromwidespread attacks (e.g., large-scale attacks against infrastructures or end points [1]) to new technological advances (i.e., new generations of malicious code are increasingly stealthy, powerful and pervasive [2]). Facing these incidents, the European Union, Japan, the United States or China have developed national cybersecurity programs, including training of professionals, development of roadmaps for new tools and services, and organization of national interest groups on the topic. There is thus a shared need for a better understanding of this kind of large-scale threats. Some of the basic requirements to better understand these large-scale incidents include handling large volumes of data collected from distributed probes and performing efficient cross-layer analysis.

Authors and Affiliations

1. Institute of Computer Science, Foundation for Research & Technology, Hellas, Greece

   Thanasis Petsas

2. Nara Institute of Science and Technology, Japan

   Kazuya Okada

3. The University of Tokyo, Japan

   Hajime Tazaki

4. CNRS UMR 5157 SAMOVAR, Tél’ecom SudParis, France

   Gregory Blanc

5. Research and Academic Computer Network, CERT Polska, Poland

   Paweł Pawliński

Editors and Affiliations

1. Chair for Systems Security, Ruhr-University Bochum, Universitätsstr. 150, ID 2/439, 44780, Bochum, Germany

   Thorsten Holz

2. Institute of Computer Science, Foundation for Research and Technology - Hellas (FORTH), Greece

   Sotiris Ioannidis

Reprints and permissions

© 2014 Springer International Publishing Switzerland

Policies and ethics