Understanding the World of your Enemy with I-CAT (Internet-Categorization of Attacks Toolkit)
Abstract
Security professionals need to understand the attacks and vulnerabilities utilized by hackers to penetrate and shut down computer systems. However, security companies that collect such knowledge share very little of it with the general security community. The result is that security professionals must use the Internet as their source of computer attack and vulnerability information. While the Internet is a rich source of such information, the data is disorganized, distributed, and unverified. Because of the difficulty of collecting attack and vulnerability information on the Internet, security organizations spend an enormous amount of money sifting through the data. We are trying to mitigate this problem with the Internet-Categorization of Attacks Toolkit (I-CAT). I-CAT is a tool that allows security professionals to quickly glean attack and vulnerability information off the Internet. I-CAT has three main services: attack description lookup, statistics on the popularity of attacks, and measurements of current trends in attack publication. These three services enable security professionals to determine what kinds of attacks are available, what specific attacks are popular, and how to find information on the published attacks.
Document Details
- Document Type
- Technical Report
- Publication Date
- May 26, 1999
- Accession Number
- ADA391654
Entities
People
- Peter Mell
Organizations
- National Institute of Standards and Technology