Research Repository

Handling of advanced persistent threats and complex incidents in healthcare, transportation and energy ICT infrastructures

Papastergiou, Spyridon and Mouratidis, Haralambos and Kalogeraki, Eleni-Maria (2021) 'Handling of advanced persistent threats and complex incidents in healthcare, transportation and energy ICT infrastructures.' Evolving Systems, 12 (1). pp. 91-108. ISSN 1868-6478

Papastergiou2021_Article_HandlingOfAdvancedPersistentTh.pdf - Published Version
Available under License Creative Commons Attribution.

Download (1MB) | Preview


In recent years, the use of information technologies in Critical Infrastructures is gradually increasing. Although this brings benefits, it also increases the possibility of security attacks. Despite the availability of various advanced incident handling techniques and tools, there is still no easy, structured, standardized and trusted way to manage and forecast interrelated cybersecurity incidents. This paper introduces CyberSANE, a novel dynamic and collaborative, warning and response system, which supports security officers and operators to recognize, identify, dynamically analyse, forecast, treat and respond to security threats and risks and and it guides them to handle effectively cyber incidents. The components of CyberSANE are described along with a description of the CyberSANE data flow. The main novelty of the CyberSANE system is the fact that it enables the combination of active incident handling approaches with reactive approaches to support incidents of compound, highly dependent Critical Information Infrastructures. The benefits and added value of using CyberSANE is described with the aid of a set of cyber-attack scenarios.

Item Type: Article
Divisions: Faculty of Science and Health
Faculty of Science and Health > Computer Science and Electronic Engineering, School of
SWORD Depositor: Elements
Depositing User: Elements
Date Deposited: 11 Feb 2022 15:57
Last Modified: 23 Sep 2022 19:47

Actions (login required)

View Item View Item