Cyberattacks targeting modern network infrastructures are increasing in number and impact. This growing phenomenon emphasizes the central role of cybersecurity and, in particular, the reaction against ongoing threats targeting assets within the protected system. Such centrality is reflected in the literature, where several works have been presented to propose full-fledged reaction methodologies to tackle offensive incidents’ consequences. In this direction, the work in~\cite{nespoli2021ais} developed an immuno-based response approach based on the application of the \gls{AIS} methodology. That is, the AIS-powered reaction is able to calculate the optimal set of atomic countermeasure to enforce on the asset within the monitored system, minimizing the risk to which those are exposed in a more than adequate time. To further contribute to this line, the paper at hand presents AISGA, a multi-objective approach that leverages the capabilities of a \gls{GA} to optimize the selection of the input parameters of the AIS methodology. Specifically, AISGA selects the optimal ranges of inputs that balance the tradeoff between minimizing the global risk and the execution time of the methodology. Additionally, by flooding the AIS-powered reaction with a wide range of possible inputs, AISGA intends to demonstrate the robustness of such a model. Exhaustive experiments are executed to precisely compute the optimal ranges of parameters, demonstrating that the proposed multi-objective optimization prefers a fast-but-effective reaction.

This work would not have been possible without the inestimable contribution of:

• Pantaleone Nespoli
• Georgios Kambourakis

Pantaleone Nespoli, Félix Gómez Mármol, Georgios Kambourakis, «AISGA: Multi-objective parameters optimization for countermeasures selection through genetic algorithm«, 2nd Workshop on Recent Advances in Cyber Situational Awareness on Military Operations (CSA 2021), in conjunction with the 16th International Conference on Availability, Reliability and Security (ARES 2021), 17-20/08/2021

• Website: 2nd Workshop on Recent Advances in Cyber Situational Awareness on Military Operations (CSA 2021)
• Date: 17-20/08/2021
• Venue: Online