Cyberattack scoring method, cyberattack scoring apparatus, and computer readable storage medium storing instructions to perform cyberattack scoring method

A cyberattack scoring method to be performed by a cyberattack scoring device including a memory storing one or more instructions;

• and a processor executing the one or more instructions stored in the memory, the method comprising:
• determining a tactic for each of unit attacks included in a cyberattack based on an adversarial tactics, techniques, and common knowledge (ATT&CK) framework;
• determining a score for each of the unit attacks by calculating a weighted sum on attributes depending on the determined tactic according to priorities;
• and
• determining the score of the cyberattack by summing the determined scores of the unit attacks,
• wherein in determining the score for each unit attack, the score of each unit attack is determined based on a typical severity level of an attack pattern of Common Attack Pattern Enumeration and Classification (CAPEC) which matches each unit attack, and
• wherein an attribute of the CAPEC attack pattern is excluded from the weighted sum of the attributes when a score of 0 is assigned to the attribute of the CAPEC attack pattern.