Jaeik Cho
Research Subjects
Research Interests
Jaeik Cho has a total of 2 co-authors. Here are the top co-authors by number of shared publications:
- Changhoon Lee
Department of Computer Science and Engineering, Seoul National University of Science and Technology, Seoul 01811, Republic of Korea
1 shared publication - Seonghyeon Gong
Department of Electrical and Computer Engineering, Illinois Institute of Technology, Chicago, IL 60616, USA
1 shared publication
Latest Publications
- 18 July 2018
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Industrial Informatics
- Vol. 14 (12) , 5428-5435
A Reliability Comparison Method for OSINT Validity Analysis
Cyber-threat intelligence (CTI) is a knowledge-based threat management system that addresses increasing cyber threats. The CTI system creates reputation information for network resources such as IP, URL and file hash based on security data collected from Security Information and Event Management (SIEM) systems. This information can be applied extensively in industrial infrastructures to provide an effective response process for cyber attacks. This information can also be applied to the security systems of internal IT and OT infrastructures such as IoT (Internet objects) and SCADA (Surveillance Control and Data Acquisition) networks. However, because the performance of infrastructure security using CTI depends on the accuracy of the data on which the system is based, careful consideration of the accuracy of the data is required. In this paper, we propose a new model that can analyze the reliability and validity of data by using comparative analysis between CTI data and present a criterion for evaluating the reliability of feed providing CTI data. The experiment uses approximately 40,000 data sets to provide data accuracy results for four CTI feeds. These results can serve as a basis for substantive validation to use CTI data.
- 18 July 2018
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Industrial Informatics
- Vol. 14 (12) , 5428-5435
A Reliability Comparison Method for OSINT Validity Analysis
Cyber-threat intelligence (CTI) is a knowledge-based threat management system that addresses increasing cyber threats. The CTI system creates reputation information for network resources such as IP, URL and file hash based on security data collected from Security Information and Event Management (SIEM) systems. This information can be applied extensively in industrial infrastructures to provide an effective response process for cyber attacks. This information can also be applied to the security systems of internal IT and OT infrastructures such as IoT (Internet objects) and SCADA (Surveillance Control and Data Acquisition) networks. However, because the performance of infrastructure security using CTI depends on the accuracy of the data on which the system is based, careful consideration of the accuracy of the data is required. In this paper, we propose a new model that can analyze the reliability and validity of data by using comparative analysis between CTI data and present a criterion for evaluating the reliability of feed providing CTI data. The experiment uses approximately 40,000 data sets to provide data accuracy results for four CTI feeds. These results can serve as a basis for substantive validation to use CTI data.