NIST logo

Publication Citation: An Attack Graph Based Probabilistic Security Metric

NIST Authors in Bold

Author(s): Lingyu Wang; Anoop Singhal;
Title: An Attack Graph Based Probabilistic Security Metric
Published: July 21, 2008
Abstract: In today's networked environments, protecting critical resources usually requires us to understand and measure the likelihood of multi-step attacks that combine different vulnerabilities for reaching the attack goal.  Such a measurement is now feasible due to a qualitative model of causal relationships between vulnerabilities, nammely, attack graph.  This paper proposes an attack graph-based probabilistic metric for measuring network security and studies its efficient computation.  We first define the basic metric and provide an intuitive and meaningful interpretation to the metric.  We then study the definition in more complex attack graphs with cycles and extend the definition accordingly.  We show that computing the metric by definition is not efficient in many cases and propose heuristics to improve the efficiency of such computation.
Conference: IFIP Conference on Data and Application Security
Location: London, UK
Dates: July 13-16, 2008
Keywords: Network Security; Vulnerability Assessment; Graphs; Security Metrics
Research Areas: Cybersecurity