research-article

Corporate networks security evaluation based on attack graphs

Authors:

Evgeny Sergeevich Abramov,

Artem Viktorovich Andreev,

Denis Valerievich Mordvin,

Oleg Borisovich MakarevichAuthors Info & Claims

SIN '11: Proceedings of the 4th international conference on Security of information and networks

Pages 29 - 36

https://doi.org/10.1145/2070425.2070433

Published: 14 November 2011 Publication History

Get Access

Abstract

Using attack graphs for the security analysis allows to consider the relationship of individual components and their security parameters. It gives more accurate data to assess the security of the system as a whole comparing with investigation of security properties of the individual nodes. This paper describes the calculation of attack graph, analyze the results and evaluate the effectiveness of existing countermeasures. The model allows dynamic routing, filtering on any network object, NAT. States in attack graph are detailed to confidentiality, integrity, availability triad. In constructing the attack graph takes into account both local and network vulnerability. The results of experimental evaluation of system performance presented. For the analysis of 10000 simulated hosts took an average time of about 100 seconds. The number of access control rules (from 500 to 4000 per simulated subnet) were chosen so that the maximum number of filtering rules for devices were about 1,000.

References

[1]

ISO / IEC 15408--3:2009.

Google Scholar

[2]

Kyle Ingols, Matthew Chu, Richard Lippmann, Seth Webster, Stephen Boyer, "Modeling Modern Network Attacks and Countermeasures Using Attack Graphs," acsac, pp.117--126, 2009 Annual Computer Security Applications Conference, 2009.

Digital Library

Google Scholar

[3]

3.Sushil Jajodia, Steven Noel, "Topological Vulnerability Analysis", Advances in Information Security, 2010, Volume 46, Part 4, pp. 139--154.

Google Scholar

[4]

Common platform enumeration. MITRE. http://cpe.mitre.org

Google Scholar

[5]

Common Vulnerability Scoring System. Forum of Incident Response and Security Teams, Common Vulnerability Scoring System-Special Interest Group. http://www.first.org/cvss/ .

Google Scholar

[6]

http://oval.mitre.org/language/interpreter.html .

Google Scholar

[7]

National Vulnerability Database. http://nvd.nist.gov/download.cfm .

Google Scholar

[8]

Official Common Platform Enumeration Dictionary. http://nvd.nist.gov/cpe.cfm .

Google Scholar

[9]

ISO / IEC 15408--1:2009.

Google Scholar

[10]

Evgeny Abramov, Denis Mordvin, and Oleg Makarevich. 2010. Automated method for constructing of network traffic filtering rules. In Proceedings of the 3rd international conference on Security of information and networks (SIN '10).ACM, New York, NY, USA, 203--211. DOI = 10.1145/1854099.1854141 http://doi.acm.org/10.1145/1854099.1854141

Digital Library

Google Scholar

[11]

Common Vulnerabilities and Exposures. MITRE. http://cve.mitre.org/ .

Google Scholar

[12]

L. Yuan et al., "FIREMAN: A toolkit for FIREwall modeling and ANalysis," in IEEE Symposium on Security and Privacy. IEEE Computer Society, 2006, pp. 199--213.

Digital Library

Google Scholar

Cited By

View all

Abramov EKobilev MMakarevich OElçi AGaur MOrgun MMakarevich O(2013)Using quadrocopter as a pentest toolProceedings of the 6th International Conference on Security of Information and Networks10.1145/2523514.2527019(404-407)Online publication date: 26-Nov-2013
https://dl.acm.org/doi/10.1145/2523514.2527019
Abramov EBasan EMakarevich OElçi AGaur MOrgun MMakarevich O(2013)Development of a secure cluster-based wireless sensor network modelProceedings of the 6th International Conference on Security of Information and Networks10.1145/2523514.2523565(372-375)Online publication date: 26-Nov-2013
https://dl.acm.org/doi/10.1145/2523514.2523565

Corporate networks security evaluation based on attack graphs
1. Social and professional topics
  1. Computing / technology policy

Recommendations

From attack graph analysis to attack function analysis
Abstract
Attack graph analysis is a model-based network-security analysis method. It generates and analyzes a directed graph called an attack graph. Each node corresponds to a malicious event caused by attackers, and the edges correspond to the causal ...
Highlights
- Proposing to use attack functions as the single source of various attack graphs.
- An attack function is a monotonic mapping between sets of propositions.
- It enables the consistent mixture of different forms of attack graphs.
- It ...
A review of attack graph and attack tree visual syntax in cyber security
Abstract
Perceiving and understanding cyber-attacks can be a difficult task, and more effective techniques are needed to aid cyber-attack perception. Attack modelling techniques (AMTs) - such as attack graphs, attack trees and fault trees, are ...
Interdicting attack graphs to protect organizations from cyber attacks

Today's organizations are inherently open and connected, sharing knowledge and ideas in order to remain innovative. As a result, these organizations are also more vulnerable to information theft through different forms of security breaches caused by ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

SIN '11: Proceedings of the 4th international conference on Security of information and networks

November 2011

276 pages

ISBN:9781450310208

DOI:10.1145/2070425

General Chairs:
Mehmet A. Orgun
Macquarie University, Australia
,
Atilla Elçi
Süleyman Demirel University, Turkey
,
Oleg Makarevich
Southern Federal University, Russia
,
Sorin Huss
Techniche Universitat Darmstadt, Germany
,
Program Chairs:
Josef Pieprzyk
Macquarie University, Australia
,
Lyudmila Babenko
Southern Federal University, Russia
,
Alexander Chefranov
Eastern Mediterranean University, North Cyprus
,
Rajan Shankaran
Macquarie University, Australia

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

In-Cooperation

SDU: Suleyman Demirel University
AOARD: Asian Office of Aerospace Research and Development
RDECOM: U.S. Army Research, Development and Engineering Command
US Army ITC-PAC Asian Research Office
AFOSR: AFOSR
ONRGlobal: U.S. Office of Naval Research Global
Macquarie University-Sydney

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 14 November 2011

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Conference

SIN 2011

SIN 2011: The 4th International Conference on Security of Information and Networks

November 14 - 19, 2011

Sydney, Australia

Acceptance Rates

Overall Acceptance Rate 102 of 289 submissions, 35%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
469
Total Downloads

Downloads (Last 12 months)2
Downloads (Last 6 weeks)1

Reflects downloads up to 22 Nov 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Abramov EKobilev MMakarevich OElçi AGaur MOrgun MMakarevich O(2013)Using quadrocopter as a pentest toolProceedings of the 6th International Conference on Security of Information and Networks10.1145/2523514.2527019(404-407)Online publication date: 26-Nov-2013
https://dl.acm.org/doi/10.1145/2523514.2527019
Abramov EBasan EMakarevich OElçi AGaur MOrgun MMakarevich O(2013)Development of a secure cluster-based wireless sensor network modelProceedings of the 6th International Conference on Security of Information and Networks10.1145/2523514.2523565(372-375)Online publication date: 26-Nov-2013
https://dl.acm.org/doi/10.1145/2523514.2523565

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Recommendations

From attack graph analysis to attack function analysis

A review of attack graph and attack tree visual syntax in cyber security

Interdicting attack graphs to protect organizations from cyber attacks