2000 character limit reached
cyberaCTIve: a STIX-based Tool for Cyber Threat Intelligence in Complex Models (2204.03676v2)
Published 7 Apr 2022 in cs.CR and cs.SE
Abstract: Cyber threat intelligence (CTI) is practical real-world information that is collected with the purpose of assessing threats in cyber-physical systems (CPS). A practical notation for sharing CTI is STIX. STIX offers facilities to create, visualise and share models; however, even a moderately simple project can be represented in STIX as a quite complex graph, suggesting to spread CTI across multiple simpler sub-projects. Our tool aims to enhance the STIX-based modelling task in contexts when such simplifications are infeasible. Examples can be the microgrid and, more in general, the smart grid.