Paper, 2025.04
Automated Cybersecurity Risk Assessment and Visualization Framework for Resilient Cloud IT Asset Management
This ACM SAC 2025 poster paper describes the design of CloudRMF, a framework for automating risk management of cloud IT assets. It identifies three weaknesses of existing approaches (poor data visualization, lack of automated process, and indirect vulnerability indicators) and proposes a four-stage framework: Cloud Twin (asset synchronization, a three-layer Instance/Network/Tenant topology, and monitoring), Risk Assessment (CVE identification with nmap and Vulners-lookup, plus likelihood-impact risk scoring), Risk Control (control mapping based on NIST SP 800-53), and Control Assessment (penetration testing driven by CVE-CWE-CAPEC-MITRE ATT&CK chains). Joonho Seo is the first author and presented the poster. It was presented at the SAC 2025 poster session in Catania, Italy, on April 2, 2025, and appears in the proceedings as a two-page paper (DOI 10.1145/3672608.3707851).
- Where
- ACM SAC 2025
- My role
- First author and presenter
- Status
- published