Cyberpatterns [recurso electrónico] Unifying Design Patterns with Security and Attack Patterns

Cyberpatterns are predictable regularities in cyberspace helping us to design and implement more effective and secure systems, and to detect and respond to breaches, failures and deficiencies in operational systems. Cyberpatterns is in its infancy and there are many challenges including: Developing a scientific foundation of pattern-oriented research methods Developing better engineering practice in novel application domains such as for cloud and cyberphysical systems Constructing a sharable knowledge-base to aid education of students, design of novel systems and the development of automated design tools Innovative applications of design patterns to pattern recognition and big data Highlights: Presents the state-of-the-art in the novel field of cyberpatterns Demonstrates the application of patterns to cyber security and other key cyberspace domains Supports the development of a sound scientific, engineering and mathematical foundation for cyberspace This important new book provides an introduction to and coverage of the state-of-the-art of cyberpatterns, from a theoretical standpoint and via practical applications, bringing together different interdisciplinary areas under one roof to portray a holistic view of the underlying principles and mechanisms of cyberpatterns. Clive Blackwell is an Associate Lecturer at Oxford Brookes University specialising in cyber security and digital forensics Hong Zhu is a Professor at Oxford Brookes University where he is Head of the Applied Formal Methods Research Group. He has a longstanding interest in design patterns and is the author of 'Software design methodology: from principles to architectural styles';Cyberpatterns: Towards a Pattern Oriented Study of Cyberspace -- Towards a Conceptual Framework for Security Patterns -- Design Patterns: Applications and Open Issues -- Challenges For A Formal Framework for Patterns -- Design Space-Based Pattern Representation -- Extending AOP Principles for the Description of Network Security Patterns -- Management Patterns for Network Resilience: Design and Verification of Policy Configurations -- A Heuristic Approach for Secure Service Composition Adaptation.- A Strategy for Structuring and Formalising Attack Patterns -- Attack Pattern Recognition through Correlating Cyber Situational Awareness in Computer Networks -- Towards a Penetration Testing Framework using Attack Patterns -- On the use of Design Patterns to Capture Memory Corruption Vulnerabilities -- 'Weird Machine' Patterns -- Towards a Simulation of Information Security Behaviour in Organisations -- Security Design Patterns in the MASTER Workbench -- Evaluating the Implications of Attack and Security Patterns with Premortems -- An Overview of Artificial Intelligence Based Pattern Matching in a Security and Digital Forensic Context -- Partitional Clustering of Malware using K-Means -- Dynamic Monitoring of Composed Services -- Where has this hard disk been? : Extracting geospatial intelligence from digital storage systems -- Future Directions for Research on Cyberpatterns. Front Matter....Pages i-xi Front Matter....Pages 1-1 Cyberpatterns: Towards a Pattern Oriented Study of Cyberspace....Pages 3-15 Towards a Conceptual Framework for Security Patterns....Pages 17-34 Front Matter....Pages 35-36 Design Patterns: Applications and Open Issues....Pages 37-45 Challenges for a Formal Framework for Patterns....Pages 47-55 Towards a General Theory of Patterns....Pages 57-69 Front Matter....Pages 71-72 Extending AOP Principles for the Description of Network Security Patterns....Pages 73-84 Management Patterns for Network Resilience: Design and Verification of Policy Configurations....Pages 85-95 A Heuristic Approach for Secure Service Composition Adaptation....Pages 97-105 Front Matter....Pages 107-109 A Strategy for Structuring and Formalising Attack Patterns....Pages 111-123 Attack Pattern Recognition Through Correlating Cyber Situational Awareness in Computer Networks....Pages 125-134 Towards a Penetration Testing Framework Using Attack Patterns....Pages 135-148 A Method for Resolving Security Vulnerabilities Through the Use of Design Patterns....Pages 149-155 ‘Weird Machine’ Patterns....Pages 157-171 Front Matter....Pages 173-175 Towards a Simulation of Information Security Behaviour in Organisations....Pages 177-184 Security Design Patterns in the MASTER Workbench....Pages 185-197 Evaluating the Implications of Attack and Security Patterns with Premortems....Pages 199-209 Front Matter....Pages 211-213 An Overview of Artificial Intelligence Based Pattern Matching in a Security and Digital Forensic Context....Pages 215-222 Partitional Clustering of Malware Using K-Means....Pages 223-233 Dynamic Monitoring of Composed Services....Pages 235-245 Where has this Hard Disk Been?: Extracting Geospatial Intelligence from Digital Storage Systems....Pages 247-255 Front Matter....Pages 257-257 Future Directions for Research on Cyberpatterns....Pages 259-264 This important new book provides an introduction to and coverage of the state-of-the-art of cyberpatterns, from a theoretical standpoint and via practical applications, bringing together different interdisciplinary areas to portray a holistic view of the underlying principles and mechanisms of cyberpatterns. It includes extended and updated papers from the First International Workshop on Cyberpatterns; provides a broad introduction to this novel and fast-moving field; contains both a research agenda and practical applications for cyberpatterns ; demonstrates the application of patterns to cyber security and other key cyberspace domains; supports the development of a sound scientific, engineering and mathematical foundation for cyberspace. -- Edited summary from book "Cyberspace in increasingly important to people in their everyday lives for purchasing goods on the Internet, to energy supply increasingly managed remotely using Internet protocols. Unfortunately, this dependence makes us susceptible to attacks from nation states, terrorists, criminals and hactivists. Therefore, we need a better understanding of cyberspace, for which patterns, which are predictable regularities, may help to detect, understand and respond to incidents better. The inspiration for the workshop came from the existing work on formalising design patterns applied to cybersecurity, but we also need to understand the many other types of patterns that arise in cyberspace."--From Publisher