| Author(s): |
Lingyu Wang; Anoop Singhal; |
| Title: |
An Attack Graph Based Probabilistic Security Metric |
| Published: |
July 21, 2008 |
| Abstract: |
In today's networked environments, protecting critical resources usually requires us to understand and measure the likelihood of multi-step attacks that combine different vulnerabilities for reaching the attack goal. Such a measurement is now feasible due to a qualitative model of causal relationships between vulnerabilities, nammely, attack graph. This paper proposes an attack graph-based probabilistic metric for measuring network security and studies its efficient computation. We first define the basic metric and provide an intuitive and meaningful interpretation to the metric. We then study the definition in more complex attack graphs with cycles and extend the definition accordingly. We show that computing the metric by definition is not efficient in many cases and propose heuristics to improve the efficiency of such computation. |
| Conference: |
IFIP Conference on Data and Application Security |
| Location: |
London, UK |
| Dates: |
July 13-16, 2008 |
| Keywords: |
Network Security; Vulnerability Assessment; Graphs; Security Metrics |
| Research Areas: |
Cybersecurity |
