Managing attack graph complexity through visual hierarchical aggregation

VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security

Volumn , Issue , 2004, Pages 109-118

  Noel, Steven ^a   Jajodia, Sushil ^a  

^a George Mason University   (United States)

Author keywords

Clustered graphs; Network attack graphs; Network attack modeling; Vulnerability analysis

Indexed keywords

ABSTRACTING; ALGORITHMS; COMPUTATIONAL COMPLEXITY; COMPUTATIONAL METHODS; COMPUTER SOFTWARE; CONFORMAL MAPPING; MATHEMATICAL MODELS; SEMANTICS;

CLUSTERED GRAPHS; NETWORK ATTACK GRAPHS; NETWORK ATTACK MODELING; VULNERABILITY ANALYSIS;

GRAPH THEORY;

EID: 20444480299     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1029208.1029225     Document Type: Conference Paper

References (24)

1. th ACM Conference on Computer and Communication Security, November 2000.
2. R. Ritchey, P. Ammann, "Using Model Checking to Analyze Network Vulnerabilities," in Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, 2000.
3. O. Sheyner, J. Haines, S. Jha, R. Lippmann, J. Wing, "Automated Generation and Analysis of Attack Graphs," in Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, 2002.
4. th IEEE Computer Security Foundations Workshop, Nova Scotia, Canada, June 2002.
5. R. Baldwin, Kuang: Rule Based Security Checking, Technical Report, MIT Lab for Computer Science, May 1994.
6. th USENIX Unix Security Symposium, San Jose, CA, 1996.
7. C. Phillips, L. Swiler, "A Graph-Based System for Network-Vulnerability Analysis," in Proceedings of the New Security Paradigms Workshop, Charlottesville, VA, 1998.
8. L. Swiler, C. Phillips, D. Ellis, S. Chakerian, "Computer-Attack Graph Generation Tool," in Proceedings of the DARPA Information Survivability Conference & Exposition II, June 2001.
9. J. Dawkins, C. Campbell, J. Hale, "Modeling Network Attacks: Extending the Attack Tree Paradigm," in Proceedings of the Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection, Johns Hopkins University, June 2002.
10. th ACM Conference on Computer and Communications Security, Washington, DC, November 2002.
11. S. Jajodia, S. Noel, B. O'Berry, "Topological Analysis of Network Attack Vulnerability," in Managing Cyber Threats: Issues, Approaches and Challenges, V. Kumar, J. Srivastava, A. Lazarevic (eds.), Kluwer Academic Publisher, 2003.
12. rd International Workshop on Recent Advances in Intrusion Detection, Toulouse, France, October 2000.
13. S. Templeton, K. Levitt, "A Requires/Provides Model for Computer Attacks," in Proceedings of the New Security Paradigms Workshop, Cork Ireland, 2000.
14. th Annual Computer Security Applications Conference, Las Vegas, Nevada, December 2002.
15. F. Cuppens, A. Miege, "Alert Correlation in a Cooperative Intrusion Detection Framework," in Proceedings of the 2002 IEEE Symposium on Security and Privacy, May 2002.
16. th ACM Conference on Computer & Communications Security, Washington D.C., November 2002.
17. th Annual Network and Distributed System Security Symposium, February, 2004.
18. S. Noel, S. Jajodia, "Correlating Intrusion Events and Building Attack Scenarios through Attack Graph Distances," submitted.
19. P. Eades, Q.-W. Feng, "Multilevel Visualization of Clustered Graphs," in Proceedings of the Symposium on Graph Drawing, September, 1996.
20. th ACM-SIAM Symposium on Discrete Algorithms, 2000.
21. M. Raitner, "HGV: A Library for Hierarchies, Graphs, and Views," in Proceedings of the Symposium on Graph Drawing, 2002.
22. M. Raitner, Maintaining Hierarchical Graph Views for Dynamic Graphs, Technical Report, MIP-0403, University of Passau, January, 2004.
23. th Annual Computer Security Applications Conference, Las Vegas, Nevada, December 2003.
24. Nessus vulnerability scanner, http://www.nessus.org/.