NDLI: Computer-attack graph generation tool

Content Provider	IEEE Xplore Digital Library
Author	Swiler, L.P. Phillips, C. Ellis, D. Chakerian, S.
Copyright Year	2001
Description	Author affiliation: Sandia Nat. Labs., Albuquerque, NM, USA (Swiler, L.P.)
Abstract	This paper presents a tool for assessment of security attributes and vulnerabilities in computer networks. The tool generates attack graphs (Phillips and Swiler, 1998). Each node in the attack graph represents a possible attack state. Edges represent a change of state caused by a single action taken by the attacker or unwitting assistant, and are weighted by some metric (such as attacker effort or time to succeed). Generation of the attack graph requires algorithms that match information about attack requirements (specified in attack templates) to information about the network configuration and assumed attacker capabilities (attacker profile). The set of near-optimal shortest paths indicates the most exploitable components of the system configuration. This paper presents the status of the tool and discusses implementation issues, especially focusing on the data input needs and methods for eliminating redundant paths and nodes in the graph.
Sponsorship	DARPA
Starting Page	307
Ending Page	321
File Size	1278126
Page Count	15
File Format	PDF
ISBN	0769512127
DOI	10.1109/DISCEX.2001.932182
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2001-06-12
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Costs Computer security Computer networks Information security Software tools Contracts National security Laboratories Computer viruses Government
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Practical Attack Graph Generation for Network Defense

Two Stochastic Models for Security Evaluation Based on Attack Graph

A Method for Global Attack Graph Generation

Information Sharing Needs for National Security

Correlating Multi-Step Attack and Constructing Attack Scenarios Based on Attack Pattern Modeling

A Probability-Based Approach to Attack Graphs Generation

Automatic Generation of Host-Based Network Attack Graph

Detection of anomalous computer session activity

A Goal-Oriented Approach for Modeling and Analyzing Attack Graph

Computer-attack graph generation tool

Similar Documents

Practical Attack Graph Generation for Network Defense

Two Stochastic Models for Security Evaluation Based on Attack Graph

A Method for Global Attack Graph Generation

Information Sharing Needs for National Security

Correlating Multi-Step Attack and Constructing Attack Scenarios Based on Attack Pattern Modeling

A Probability-Based Approach to Attack Graphs Generation

Automatic Generation of Host-Based Network Attack Graph

Detection of anomalous computer session activity

A Goal-Oriented Approach for Modeling and Analyzing Attack Graph

Computer-attack graph generation tool