Raciocínio baseado em casos como uma técnica para gestão do conhecimento da resolução de incidentes de segurança

• Ano de defesa: 2018
• Autor(a) principal: Colomé, Marcelo da Lúz
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Instituição de defesa: Universidade Federal de Santa Maria; Brasil; Ciência da Computação; UFSM; Programa de Pós-Graduação em Ciência da Computação; Centro de Tecnologia
• Palavras-chave em Português: Incidentes de segurança; Raciocínio baseado em casos; Segurança da informação; Sistemas de resposta à intrusão; Case-based reasoning; Cybersecurity; Incidents; Intrusion response systems; CNPQ::CIENCIAS EXATAS E DA TERRA::CIENCIA DA COMPUTACAO
• Link de acesso: http://repositorio.ufsm.br/handle/1/14663

This work demonstrates the importance of applying computing techniques in to the knowledge management of cybersecurity incidents, offering a metodological approach for the retention and reuse of the specialist’s knowledge aiming the resolution of new incidents. The information security specialist’s knlowledge is central for organizations, because the effective resolution of incidents depends on their knowledge. However organizations should not be totally dependent on their employees. Thus, the proposed metodology uses Cased-based Reasoning with weighted attributes and the IODEF pattern for the representation of those incidents, aiming the retention of the specialist’s knowledge on the incidents resolution, allowing other organization members to perform similar tasks, decreasing the dependancy between the company and its employees. The results demonstrate that with this metodology the knowledge is effectively retained in the case-base and that new employees can be benefited from the recomendations built and provided by the system, improoving the knowledge retention in organizations.