New tool detects complex cyber attacks in computer networks automatically.
The goal of the study was to develop a tool called MsAMS to automatically find multi-step attacks in computer networks. The researchers used Mobile Ambients and Heuristic Search to model networks and simulate attackers searching for possible attacks. By applying algorithms from Web search, they were able to score network assets and find vulnerabilities. The approach allowed for representing network topology and dynamics of attacks, making it easier to identify potential threats. The key findings suggest that the MsAMS tool can efficiently detect complex multi-step attacks involving credentials in large networks.