Utilize este identificador para referenciar este registo: http://hdl.handle.net/10071/30101
Autoria: Zhao, T.
Lechner, U.
Pinto-Albuquerque, M.
Ongu, D.
Editor: Vidmar, M.
Data: 2023
Título próprio: An ontology-based model for evaluating cloud attack scenarios in CATS: A serious game in cloud security
Título e volume do livro: 2023 IEEE 29th International Conference on Engineering, Technology and Innovation (ICE/ITMC)
Título do evento: 29th International Conference on Engineering, Technology and Innovation (ICE/ITMC)
Referência bibliográfica: Zhao, T., Lechner, U., Pinto-Albuquerque, M., & Ongu, D. (2023). An ontology-based model for evaluating cloud attack scenarios in CATS: A serious game in cloud security. In M. Vidmar (Ed.), 2023 IEEE 29th International Conference on Engineering, Technology and Innovation (ICE/ITMC). IEEE. https://doi.org/10.1109/ICE/ITMC58018.2023.10332371
ISSN: 2334-315X
ISBN: 979-8-3503-1517-2
DOI (Digital Object Identifier): 10.1109/ICE/ITMC58018.2023.10332371
Palavras-chave: Technology and engineering learning
Cloud security
Serious game
Shared-responsibility model
Ontology-based model
Resumo: In recent years, the market of cloud services has been growing rapidly. Consequently, cloud security has become a heavily discussed topic in the industry. If cloud assets are misconfigured, it can lead to severe security issues and be exposured to cybersecurity attacks. It is of great importance that industry practitioners understand the security challenges and their responsibilities to protect cloud assets. We designed a serious game: Cloud of Assets and Threats (CATS) as an enrichment to the traditional training method to empower users of the cloud infrastructure in terms of cloud security awareness. In this work, we propose a new ontology-based model to support the evaluation of the simulated attack scenarios in CATS. We share the implementation details and the algorithm, based on the Common Vulnerability Scoring System (CVSS), which is used in CATS to evaluate the simulated attack scenarios. With this innovative effort, we maximize the level to which the CATS game reflects real-world facts, and provide a reasonable level of abstraction in the serious game. Our work contributes to the body of knowledge by extending the existing ontology and applying it in the evaluator algorithm, which stands at the core of our serious game CATS. We apply CATS in training in the industry and discovered that CATS is a promising approach to help the industry practitioners to understand cloud security concepts and raise awareness about cloud security. Scholars in the academic world benefit from the work by gaining experience in instantiating the design science paradigm.
Arbitragem científica: yes
Acesso: Acesso Embargado
Aparece nas coleções:ISTAR-CRI - Comunicações a conferências internacionais

Ficheiros deste registo:
Ficheiro TamanhoFormato 
  Restricted Access
496,02 kBAdobe PDFVer/Abrir Request a copy

FacebookTwitterDeliciousLinkedInDiggGoogle BookmarksMySpaceOrkut
Formato BibTex mendeley Endnote Logotipo do DeGóis Logotipo do Orcid 

Todos os registos no repositório estão protegidos por leis de copyright, com todos os direitos reservados.