Leveraging Artificial Intelligence for Active Cyber Defense Against to Advanced Persistent Threats to Homeland Security

Özbay R., YAVANOĞLU U.

2024 International Symposium on Networks, Computers and Communications, ISNCC 2024, Washington, Amerika Birleşik Devletleri, 22 - 25 Ekim 2024 identifier

  • Yayın Türü: Bildiri / Tam Metin Bildiri
  • Doi Numarası: 10.1109/isncc62547.2024.10758980
  • Basıldığı Şehir: Washington
  • Basıldığı Ülke: Amerika Birleşik Devletleri
  • Anahtar Kelimeler: Active Cyber Defense, Advanced Persistent Threat, Artificial Intelligence, Cyber Kill Chain, Homeland Security, Security
  • Gazi Üniversitesi Adresli: Evet

Özet

Increasing cyber threats have rendered traditional security solutions such as firewalls and intrusion-detection/prevention systems insufficient in providing adequate protection against advanced persistent threats to homeland security. To enhance protection, the implementation of active cyber defense is recommended, offering alternative yet effective measures against these threats. This paper examines the phases of the cyber kill chain, one of the cyber defense techniques, which has been enhanced to analyze and understand advanced persistent threats. It explains the use of deception, slowdown, and counterattacks for active cyber defense. Additionally, the utilization of artificial intelligence in active cyber defense techniques is discussed. Finally, the paper elucidates how these techniques can be employed within the scope of active cyber defense to enhance security.