NDLI: Methodology for analyzing the compromise of a deployed tactical network

Content Provider	IEEE Xplore Digital Library
Author	Asman, B.C. Kim, M.H. Moschitto, R.A. Stauffer, J.C. Huddleston, S.H.
Copyright Year	2011
Description	Author affiliation: United States Military Academy Department of Systems Engineering, West Point, NY 10996 USA (Asman, B.C.; Kim, M.H.; Moschitto, R.A.; Stauffer, J.C.; Huddleston, S.H.)
Abstract	As the Department of Defense transitions to a ubiquitous computing environment, our military operations become increasingly vulnerable to compromise via cyber attacks at echelons as low as the Brigade Combat Team (BCT). There is a need to design a system to facilitate the analysis of a nation state's ability to compromise the confidentiality, availability, and integrity of a deployed tactical network. Research demonstrated that, on these networks, compromises due to security protocols violated by humans are much more common than compromises due to technological vulnerabilities. Therefore, this analysis focuses on developing a simulation modeling approach to analyze the effectiveness of security protocols “within the fortress” and to track the damage done by various forms of cyber attacks that have successfully breached the network perimeter. Our network model uses agent-based simulation in order to model the flow of information at the packet level with dictated behavior specific to the agents modeled: individual network packets, computer systems, routers, servers, and files. The advantage to using an agent-based, rather than a discrete-event, simulation model in this situation is that agent-based models focus on the relationship between entities from the bottom-up, such as at the network packet level, rather than the entire system from the top-down. The developed simulation model allows us to simulate various network attacks, observe their interaction with network security protocols, assess the resulting damage in terms of the network's availability, and quantify the damage in terms of sensitive information lost.
Starting Page	164
Ending Page	169
File Size	931708
Page Count	6
File Format	PDF
ISBN	9781457704468
e-ISBN	9781457704475
DOI	10.1109/SIEDS.2011.5876871
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-04-29
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computational modeling Computers Security Servers Network topology Government
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A simplified graph-based methodology for analyzing firewall rules

The automaton modeling of typical network attacks

A visualization analysis tool for DNS amplification attack

A novel hierarchical botnet model

Analyzing Packet-Level Routing in Data Centers

Experiments with SmartGridSolve: Achieving higher performance by improving the GridRPC model

A cross-domain authentication protocol based on hypercube

Caching Policies for In-Network Caching

Cloud computing for future generation of computing technology

Methodology for analyzing the compromise of a deployed tactical network

Similar Documents

A simplified graph-based methodology for analyzing firewall rules

The automaton modeling of typical network attacks

A visualization analysis tool for DNS amplification attack

A novel hierarchical botnet model

Analyzing Packet-Level Routing in Data Centers

Experiments with SmartGridSolve: Achieving higher performance by improving the GridRPC model

A cross-domain authentication protocol based on hypercube

Caching Policies for In-Network Caching

Cloud computing for future generation of computing technology

Methodology for analyzing the compromise of a deployed tactical network