Mtetwa, Nhamoinesu

Tianfield, Huaglory

Yousefi, Mohammadmehdi

Zhang, Yan

English

Attack graph technique is a common tool for the evaluation of network security. However, attack graphs are generally too large and complex to be understood and interpreted by security administrators. This paper proposes an analysis framework for security attack graphs for a given IT infrastructure system. First, in order to facilitate the discovery of interconnectivities among vulnerabilities in a network, multi-host multi-stage vulnerability analysis (MulVAL) is employed to generate an attack graph for a given network topology. Then a novel algorithm is applied to refine the attack graph and generate a simplified graph called a transition graph. Next, a Markov model is used to project the future security posture of the system. Finally, the framework is evaluated by applying it on a typical IT network scenario with specific services, network configurations, and vulnerabilities

ResearchOnline@GCU

A novel approach for analysis of attack graph

Mehdi Yousefi

Nhamo Mtetwa

Yan Zhang

Huaglory Tianfield

Crossref

https://researchonline.gcu.ac.uk/files/25104976/Yousefi_va2017.pdf

A novel approach for analysis of attack graph

Abstract

Similar works

Full text

Available Versions

ResearchOnline@GCU

Crossref