This Article Full Text (PDF) References Alert me when this article is cited Alert me if a correction is posted Services Email this article to a friend Similar articles in this journal Similar articles in Web of Science Alert me to new issues of the journal Add to Saved Citations Download to citation manager Request Permissions Request Reprints Add to My Marked Citations Citing Articles Citing Articles via Google Scholar Citing Articles via Scopus Google Scholar Articles by Li, W. Articles by Dandass, Y. S. Search for Related Content Social Bookmarking                         What's this?

An Approach to Model Network Exploitations Using Exploitation Graphs

Graduate School of Computer and Information Sciences, Nova Southeastern University, 3301 College Avenue, Fort Lauderdale, FL 33314, lwei{at}nova.edu

Rayford B. Vaughn

Department of Computer Science and Engineering, Mississippi State University, Box 9637, Mississippi State, MS 39762

Yoginder S. Dandass

Department of Computer Science and Engineering, Mississippi State University, Box 9637, Mississippi State, MS 39762

In this article, a modeling process is defined to address challenges in analyzing attack scenarios and mitigating vulnerabilities in networked environments. Known system vulnerability data, system configuration data, and vulnerability scanner results are considered to create exploitation graphs (e-graphs) that are used to represent attack scenarios. Experiments carried out in a cluster computing environment showed the usefulness of proposed techniques in providing in-depth attack scenario analyses for security engineering. Critical vulnerabilities can be identified by employing graph algorithms. Several factors were used to measure the difficulty in executing an attack. A cost/benefit analysis was used for more accurate quantitative analysis of attack scenarios. The authors also show how the attack scenario analyses better help deployment of security products and design of network topologies.

Key Words: Exploitation graph (e-graph) • vulnerability graph • graph-based modeling • computer security

SIMULATION, Vol. 82, No. 8, 523-541 (2006)
DOI: 10.1177/0037549706072046


CiteULike    Complore    Connotea    Del.icio.us    Digg    Reddit    Technorati    Twitter    What's this?