The testbed for definition of the exploit’s execution features to detect and score cyber attacks

Abstract

The paper considers the deployment of the testbed for definition of the exploit’s execution features to detect and score cyber-attacks. The paper describes the place of the proposed testbed in the approach to the cyber-attack detection and scoring. It defines the requirements to the testbed considering the introduced approach. The testbed infrastructure is defined and deployed considering the specified requirements. The introduced testbed infrastructure is justified. Finally, the technique of the testbed implementation for the feature extraction is introduced. The proposed testbed and technique allow combining advantages of the static and dynamic approaches to the exploits analysis and detecting and scoring known and previously unseen cyber-attacks.