Cyberattack scoring method, cyberattack scoring apparatus, and computer readable storage medium storing instructions to perform cyberattack scoring method

Abstract

Proposed is a cyberattack scoring method performed by a cyberattack scoring device including a memory storing one or more instructions and a processor executing the one or more instructions stored in the memory. The method may include determining a tactic for each of unit attacks included in a cyberattack based on an Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) framework. The method may also include determining a score for each of the unit attacks by calculating a weighted sum on attributes depending on the determined tactic according to priorities. The method may further include determining the score of the cyberattack by summing the determined scores of the unit attacks.