dissertation · K-State Research Exchange (Kansas State University) · 2008
Security risk prioritization for logical attack graphs
Cited by 0Open access
Abstract
To prevent large networks from potential security threats, network administrators need to know in advance what components of their networks are under high security risk.One way to obtain this knowledge is via attack graphs.Various types of attack graphs based on miscellaneous techniques has been proposed [1][2][3][4][5].However, attack graphs can only make assertion about different paths that an attacker can take to compromise the network.This information is just half the solution in securing a particular network.Network administrators need to analyze an attack graph to be able to identify the associated risk.Provided that attack graphs can get very large in size, it would be very difficult for them to perform the task.In this thesis, I provide a security risk prioritization algorithm to rank logical attack graphs produced by MulVAL (A vulnerability analysis system) [6].My proposed method (called StepRank) is based on a previously published algorithm called AssetRank [7] that generalizes over Google's PageRank [8] algorithm.StepRank considers a forward attack graph that is a reversed version of the original MulVAL attack graph used by AssetRank.The result of the ranking algorithm is a rank value for each node that is relative to every other rank value and shows how difficult it is for an attacker to satisfy a node.
Cite this paper
Almohri, H. M. J. (2008). Security risk prioritization for logical attack graphs. K-State Research Exchange (Kansas State University).
Almohri, Hussain M. J. “Security risk prioritization for logical attack graphs.” K-State Research Exchange (Kansas State University), 2008.
Almohri, Hussain M. J. 2008. “Security risk prioritization for logical attack graphs.” K-State Research Exchange (Kansas State University).
Almohri, H.M.J. (2008) ‘Security risk prioritization for logical attack graphs’, K-State Research Exchange (Kansas State University).
@phdthesis{almohri2008security,
title = {{Security risk prioritization for logical attack graphs}},
author = {Almohri, Hussain M. J.},
school = {K-State Research Exchange (Kansas State University)},
year = {2008}
}Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.