DOE OSTI · 1170510
Nested Narratives Final Report
Abstract
In cybersecurity forensics and incident response, the story of what has happened is the most important artifact yet the one least supported by tools and techniques. Existing tools focus on gathering and manipulating low-level data to allow an analyst to investigate exactly what happened on a host system or a network. Higher-level analysis is usually left to whatever ad hoc tools and techniques an individual may have developed. We discuss visual representations of narrative in the context of cybersecurity incidents with an eye toward multi-scale illustration of actions and actors. We envision that this representation could smoothly encompass individual packets on a wire at the lowest level and nation-state-level actors at the highest. We present progress to date, discuss the impact of technical risk on this project and highlight opportunities for future work.
Explore related subjects
Keep this discovery
Explore connections, maps & timelines
Wilson, Andrew T., Pattengale, Nicholas D., Forsythe, James C., Carvey, Bradley John. 2015-02-01. Nested Narratives Final Report. https://doi.org/10.2172/1170510
Cite the original work for its findings. Save a collection to share your selection of sources.