An attack-target-method schema for cyber attack event database

Abstract

Many cyber attacks events have been occurring. Those are described so various points of views that redundancy of attack events information is increased. In this paper, to cope with the problems, we propose and develop attacker classification, attack-method classification, asset classification systems, as well as an ATM-schema that is an integrated schema of attacker's view, target(asset)'s view and attack-method's view. Additionally, we implement an ‘attack capability evaluation support system’ by using that schema. Those are useful for efficiently constructing an attack database of various cyber attack events and big data.