Qualitative and quantitative analytical techniques for network security assessment

Clark, Kevin; Tyree, Stephen; Dawkins, J.; Hale, John

doi:10.1109/iaw.2004.1437834

Cited by 15 publications

(9 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…While these are interesting and offer different views to study the system of evaluation, they often rely on a fixed formula to determine the system-wide values (multiplication of probabilities to find the total probability of attackers achieving their goals [4], access path vulnerabilities are the sum of the vulnerabilities of the included edges [11]). Thus, they are not applicable to the non-linear world.…”

Section: Related Workmentioning

confidence: 99%

“…The existing work in the last category, focusing only on the security, decomposes the real system into entities of concern and models the interactions between these entities in different ways such as system devices and access paths [11], network components with physical and logical connections [4], security contributing factors and functional relationships [20]. While these are interesting and offer different views to study the system of evaluation, they often rely on a fixed formula to determine the system-wide values (multiplication of probabilities to find the total probability of attackers achieving their goals [4], access path vulnerabilities are the sum of the vulnerabilities of the included edges [11]).…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Security Assurance Aggregation for IT Infrastructures

Pham

Riguidel

2007

2007 Second International Conference on Systems and Networks Communications (ICSNC 2007)

View full text Add to dashboard Cite

In the development of more extensive information systems, IT security becomes increasingly important. The need for a tool to measure current security assurance level is therefore vital in order to maintain and improve the overall security of deployed systems. In this paper, we discuss several security assurance aspects and the role of aggregation in this context. Then, we introduce a general method to combine security assurance information into system wide values. This method takes into account the fact that the relations in complex systems are non-linear and also the appearance of emergent properties. Furthermore, using patterns to simplify the process of the system security assurance assessment is presented as an enhancement.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Security Assurance Aggregation for IT Infrastructures

Pham

Riguidel

2007

2007 Second International Conference on Systems and Networks Communications (ICSNC 2007)

View full text Add to dashboard Cite

show abstract

“…Dawkins et al define an attack plan and classify attack levels in the network. Clark et al [2] present multi-step attack modeling in attack trees and analyze cut sets of the attack tree. Ray and Poolsapassit [9] present an attack tree expansion structure and a minimal attack tree to reduce the deficiencies in traditional attack trees.…”

Section: Attack Treesmentioning

confidence: 99%

Vulnerability-based information security risk assessment using attack tree

Wang

Simmons

2015

Software Engineering and Applications/ 831: Advances in Power and Energy Systems

View full text Add to dashboard Cite

show abstract

“…The existing work in the last category decomposes the real system into entities of concern and models the interactions between these entities in different ways such as system devices and access path [15], network components with physical and logical connections [5], security contributing factors and functional relationships [28]. While this is interesting and offers different views to study the system of evaluation, these approaches often rely on a fixed formula to determine the system-wide values.…”

Section: Related Workmentioning

confidence: 99%

A Near Real-Time System for Security Assurance Assessment

Pham

Baud

Bellot

et al. 2008

2008 the Third International Conference on Internet Monitoring and Protection

View full text Add to dashboard Cite

Building systems that are guaranteed to be secure or to remain secure over time is still an unachievable goal. The need for a tool that helps to determine security assurance level of a system is therefore vital in order to maintain and improve overall security. This paper introduces our system to assess the overall security assurance of a large, networked, IT-driven system in terms of a dedicated evaluation infrastructure based on multiagent technology. We use attack graph approach to compute an attackability metric value and define other metrics for anomaly detection to assess both the static and dynamic visions of the system under study. The implemented software system is described, and the examples of experiments for evaluating of network component, sub network and network security assurance levels are considered.

show abstract

Qualitative and quantitative analytical techniques for network security assessment

Cited by 15 publications

References 4 publications

Security Assurance Aggregation for IT Infrastructures

Security Assurance Aggregation for IT Infrastructures

Vulnerability-based information security risk assessment using attack tree

A Near Real-Time System for Security Assurance Assessment

Contact Info

Product

Resources

About