NDLI: Toward measuring network security using attack graphs

Please wait, while we are loading the content...

Effect of static analysis tools on software security: preliminary investigation

An algorithm for the appraisal of assurance indicators for complex business processes

Implementing and testing dynamic timeout adjustment as a dos counter-measure

AMBRA: automated model-based risk analysis

Model-based assurance of security controls

Measuring up: how to keep security metrics useful and realistic

Improving vulnerability discovery models

Towards a taxonomy for information security metrics

Defining categories to select representative attack test-cases

Toward measuring network security using attack graphs

A technique for self-certifying tamper resistant software

Quantitative software security risk assessment model

Program obfuscation: a quantitative approach

Toward measuring network security using attack graphs

Content Provider	ACM Digital Library
Author	Wang, Lingyu Singhal, Anoop Jajodia, Sushil
Abstract	In measuring the overall security of a network, a crucial issue is to correctly compose the measure of individual components. Incorrect compositions may lead to misleading results. For example, a network with less vulnerabilities or a more diversified configuration is not necessarily more secure. To obtain correct compositions of individual measures, we need to first understand the interplay between network components. For example, how vulnerabilities can be combined by attackers in advancing an intrusion. Such an understanding becomes possible with recent advances in modeling network security using attack graphs. Based on our experiences with attack graph analysis, we propose an integrated framework for measuring various aspects of network security. We first outline our principles andmethodologies. We then describe concrete examples to buildintuitions. Finally, we present our formal framework. It is our belief that metrics developed based on the proposed framework will lead to novel quantitative approaches to vulnerability analysis, network hardening, and attack response.
Starting Page	49
Ending Page	54
Page Count	6
File Format	PDF
ISBN	9781595938855
DOI	10.1145/1314257.1314273
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-10-29
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Attack graphs Intrusion detection Vulnerability analysis Security metrics
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in