Approach for determination of cyber-attack goals based on the ontology of security metrics

The research aims to determinate cyber-attack goals in the information systems of various types for the further selection of the optimal countermeasures. We propose an approach based on the ontology of security metrics to achieve the research goal. The developed ontology provides the features for the determination of attack goals using neuro-fuzzy network. The paper describes the proposed ontology combining security components, classes of security metrics, various data sources, and relations between them. The concept of using the security metrics as features for training neuro-fuzzy network is given. Application of the approach is shown on the case study.