A novel approach for analysis of attack graph

Research output: Chapter in Book/Report/Conference proceedingConference contribution

167 Downloads (Pure)

Abstract

Attack graph technique is a common tool for the evaluation of network security. However, attack graphs are generally too large and complex to be understood and interpreted by security administrators. This paper proposes an analysis framework for security attack graphs for a given IT infrastructure system. First, in order to facilitate the discovery of interconnectivities among vulnerabilities in a network, multi-host multi-stage vulnerability analysis (MulVAL) is employed to generate an attack graph for a given network topology. Then a novel algorithm is applied to refine the attack graph and generate a simplified graph called a transition graph. Next, a Markov model is used to project the future security posture of the system. Finally, the framework is evaluated by applying it on a typical IT network scenario with specific services, network configurations, and vulnerabilities.
Original languageEnglish
Title of host publicationProceedings of 2017 IEEE International Conference on Intelligence and Security Informatics
PublisherIEEE
Number of pages6
DOIs
Publication statusPublished - 18 Aug 2017

    Fingerprint

Keywords

  • cyber security
  • security metrics
  • vulnerability assessment
  • attack graph

Cite this

Yousefi, M., Mtetwa, N., Zhang, Y., & Tianfield, H. (2017). A novel approach for analysis of attack graph. In Proceedings of 2017 IEEE International Conference on Intelligence and Security Informatics IEEE. https://doi.org/10.1109/ISI.2017.8004866