Novel Architecture of Security Orchestration, Automation and Response in Internet of Blended Environment

Simple item page
dc.citation.issue1
dc.citation.volume73
dc.contributor.authorLee M
dc.contributor.authorJang-Jaccard J
dc.contributor.authorKwak J
dc.date.accessioned2023-11-14T22:25:50Z
dc.date.accessioned2023-11-20T01:38:01Z
dc.date.available2022-05-18
dc.date.available2023-11-14T22:25:50Z
dc.date.available2023-11-20T01:38:01Z
dc.date.issued2022-05-18
dc.description.abstractNew technologies that take advantage of the emergence of massive Internet of Things (IoT) and a hyper-connected network environment have rapidly increased in recent years. These technologies are used in diverse environments, such as smart factories, digital healthcare, and smart grids, with increased security concerns. We intend to operate Security Orchestration, Automation and Response (SOAR) in various environments through new concept definitions as the need to detect and respond automatically to rapidly increasing security incidents without the intervention of security personnel has emerged. To facilitate the understanding of the security concern involved in this newly emerging area, we offer the definition of Internet of Blended Environment (IoBE) where various convergence environments are interconnected and the data analyzed in automation. We define Blended Threat (BT) as a security threat that exploits security vulnerabilities through various attack surfaces in the IoBE. We propose a novel SOAR-CUBE architecture to respond to security incidents with minimal human intervention by automating the BT response process. The Security Orchestration, Automation, and Response (SOAR) part of our architecture is used to link heterogeneous security technologies and the threat intelligence function that collects threat data and performs a correlation analysis of the data. SOAR is operated under Collaborative Units of Blended Environment (CUBE) which facilitates dynamic exchanges of data according to the environment applied to the IoBE by distributing and deploying security technologies for each BT type and dynamically combining them according to the cyber kill chain stage to minimize the damage and respond efficiently to BT.
dc.description.confidentialfalse
dc.format.pagination199-223
dc.identifier.citationLee M, Jang-Jaccard J, Kwak J. (2022). Novel Architecture of Security Orchestration, Automation and Response in Internet of Blended Environment. Computers, Materials and Continua. 73. 1. (pp. 199-223).
dc.identifier.doi10.32604/cmc.2022.028495
dc.identifier.eissn1546-2226
dc.identifier.elements-typejournal-article
dc.identifier.issn1546-2218
dc.identifier.urihttps://mro.massey.ac.nz/handle/10179/69147
dc.languageEnglish
dc.publisherTech Science Press
dc.publisher.urihttps://www.techscience.com/cmc/v73n1/47847
dc.relation.isPartOfComputers, Materials and Continua
dc.rightsCC BY 4.0
dc.rights.urihttps://creativecommons.org/licenses/by/4.0/
dc.subjectBlended threat (BT)
dc.subjectcollaborative units for blended environment (CUBE)
dc.subjectinternet of blended environment (IoBE)
dc.subjectsecurity orchestration, automation and response (SOAR)
dc.titleNovel Architecture of Security Orchestration, Automation and Response in Internet of Blended Environment
dc.typeJournal article
pubs.elements-id454553
pubs.organisational-groupOther
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
454553 PDF.pdf
Size:
1.28 MB
Format:
Adobe Portable Document Format
Description:
Download
Collections
Journal Articles