Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems - Equipe SecurIty and Resilience of Information Systems Access content directly
Conference Papers Year : 2023

Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems

Abstract

Intrusion Detection Systems (IDSs) are essential cybersecurity components. Previous cyberattack detection methods relied more on signatures and rules to detect cyberattacks, although there has been a change in paradigm in the last decade, with Machine Learning (ML) enabling more efficient and flexible statistical methods. However, ML is currently unable to integrate cybersecurity information into its inner workings. This paper introduces Cyber Informedness, a new metric taking into account cybersecurity information to give a more informed representation of performance, influenced by the severity of the attacks encountered. This metric uses a de facto standard in cybersecurity: the Common Vulnerability Scoring System (CVSS). Results on two public datasets show that this new metric validates results obtained with generic metrics. Furthermore, this new metric highlights ML-based IDSs that prioritize high performance on severe attacks, which is not visible with generic metrics. Consequently, this new metric nicely completes generic metrics by bridging the gap between ML and cybersecurity.
Fichier principal
Vignette du fichier
EICC2023-RobinDURAZ.pdf (440.98 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04159578 , version 1 (01-03-2024)

Identifiers

Cite

Robin Duraz, David Espes, Julien Francq, Sandrine Vaton. Cyber Informedness: A New Metric using CVSS to Increase Trust in Intrusion Detection Systems. EICC 2023: European Interdisciplinary Cybersecurity Conference, Jun 2023, Stavanger, Norway. ⟨10.1145/3590777.3590786⟩. ⟨hal-04159578⟩
220 View
13 Download

Altmetric

Share

Gmail Facebook X LinkedIn More