loading...
Modeling and Simulating System Exploitations through Exploitation Graphs for Security Engineering
Kauai, Hawaii January 04-January 07
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/HICSS.2006.353Proceedings of the 39th Annual Hawaii ...
 This Article 
 
PURCHASE ARTICLE: $0
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Wei Li, Nova Southeastern University
Rayford B. Vaughn, Mississippi State University
In this paper, we define a process to model and simulate attack scenarios in networked environments. Known system vulnerability data, system configuration data, and vulnerability scanner results are associated to create exploitation graphs (e-graphs) which are used to represent attack scenarios. Experiments carried out in a cluster computing environment showed the usefulness of proposed techniques in providing in-depth attack scenario analyses for security engineering. Critical vulnerabilities can be identified by employing graph algorithms. Several factors were used to measure the difficulty in executing an attack. A cost/benefit analysis was used for more accurate quantitative analysis of attack scenarios. We have also shown how the attack scenario analyses better help deployment of security products and design of network topologies.
Citation:
Wei Li, Rayford B. Vaughn, "Modeling and Simulating System Exploitations through Exploitation Graphs for Security Engineering," hicss, vol. 9, pp.225c, Proceedings of the 39th Annual Hawaii International Conference on System Sciences (HICSS'06) Track 9, 2006
Usage of this product signifies your acceptance of the Terms of Use.