A novel approach for analysis of attack graph

Research output: Chapter in Book/Report/Conference proceedingConference contribution

192 Downloads (Pure)

Abstract

Attack graph technique is a common tool for the evaluation of network security. However, attack graphs are generally too large and complex to be understood and interpreted by security administrators. This paper proposes an analysis framework for security attack graphs for a given IT infrastructure system. First, in order to facilitate the discovery of interconnectivities among vulnerabilities in a network, multi-host multi-stage vulnerability analysis (MulVAL) is employed to generate an attack graph for a given network topology. Then a novel algorithm is applied to refine the attack graph and generate a simplified graph called a transition graph. Next, a Markov model is used to project the future security posture of the system. Finally, the framework is evaluated by applying it on a typical IT network scenario with specific services, network configurations, and vulnerabilities.
Original languageEnglish
Title of host publicationProceedings of 2017 IEEE International Conference on Intelligence and Security Informatics
PublisherIEEE
Number of pages6
DOIs
Publication statusPublished - 18 Aug 2017

Keywords

  • cyber security
  • security metrics
  • vulnerability assessment
  • attack graph

Fingerprint Dive into the research topics of 'A novel approach for analysis of attack graph'. Together they form a unique fingerprint.

  • Cite this

    Yousefi, M., Mtetwa, N., Zhang, Y., & Tianfield, H. (2017). A novel approach for analysis of attack graph. In Proceedings of 2017 IEEE International Conference on Intelligence and Security Informatics IEEE. https://doi.org/10.1109/ISI.2017.8004866