Quantitative hierarchical threat evaluation model for network security

Ruan Jian Xue Bao/Journal of Software

Volumn 17, Issue 4, 2006, Pages 885-897

  Chen, Xiu Zhen ^a   Zheng, Qing Hua ^a   Guan, Xiao Hong ^a,b   Lin, Chen Guang ^a  

^a XI'AN JIAOTONG UNIVERSITY   (China)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

Intrusion detection system; Network security; Threat evaluation model; Threat index; Threat situation

Indexed keywords

BANDWIDTH; COMPUTATIONAL METHODS; EVALUATION; SECURITY OF DATA; SERVERS;

ATTACK FREQUENCY; HONEYNET NETWORK; HOSTS; INTRUSION DETECTION SYSTEM (IDS); NETWORK BANDWIDTH CONSUMPTION; NETWORK SECURITY; SECURITY ENGINEERING; SECURITY STRATEGIES; SYSTEM SECURITY; THREAT EVALUATION MODEL; THREAT INDEX; THREAT SITUATION;

COMPUTER NETWORKS;

EID: 33745170386     PISSN: 10009825     EISSN: None     Source Type: Journal    
DOI: 10.1360/jos170885     Document Type: Article

References (20)

1. Cuppens F, Miege A. Alert correlation in a cooperative intrusion detection framework. In: IEEE Symp. on Security and Privacy. Oakland, 2002. 12-15. http://ieeexplore.ieee.org/iel5/7873/21681/01004372.pdf-tp= and arnumber=1004372 and isnumber=21681
2. Qin XZ, Lee WK. Statistical causality analysis of INFOSEC alert data. In: Proc. of the 6th Int'l Symp. on Recent Advances in Intrusion Detection. Pittsburgh, 2003. 73-93. http://www.springerlink.com/media/ c5jhqhlrukegjxhpyddj/contributions/u/t/m/h/utmhwugc5lwjnfh6_html/ BodyRef/PDF/558_10953587_Chapter_5.pdf
3. Bass T. Intrusion systems and multisensor data fusion: Creating cyberspace situational awareness. Communications of the ACM, 2000, 43(4): 99-105.
4. Ortalo R, Deswarte Y, Kaaniche M. Experimenting with quantitative evaluation tools for monitoring operational security. IEEE Trans. on Software Engineering, 1999, 25(5): 633-651.
5. Xiao DJ, Yang SJ, Zhou KF, Chen XS. A study of evaluation model for network security. Journal of Huazhong University of Science and Technology (Nature Science Edition), 2002, 30(4): 37-39 (in Chinese with English abstract).
6. Feng DG, Zhang Y, Zhang YQ. Survey of information security risk assessment. Journal of China Institute of Communications, 2004, 25(7): 10-18 (in Chinese with English abstract).
7. Bass T. Multisensor data fusion for next generation distributed intrusion detection systems. In: 1999 IRIS National Symp. on Sensor and Data Fusion. Laurel, 1999. 24-27.
8. D'Ambrosio B, Takikawa M, Upper D, Fitzgerald J, Mahoney S. Security situation assessment and response evaluation. In: DARPA Information Survivability Conf. and Exposition II. Anaheirn, 2001. 387-394. http://ieeexplore.ieee.org/iel5/7418/20170/00932233.pdf-tp= and arnumber=932233 and isnumber=20170
9. Porras P, Fong M, Valdes A. A mission-impact-based approach to INFOSEC alarm correlation. In: Proc. of the 15th Int'l Symp. on Recent Advances in Intrusion Detection. Zurich, 2002. 95-114. http://www.springerlink.com/media/mh9xdpqyrr0wq6tvxceg/ contributions/2/4/8/7/2487wb0an7qq8art.pdf
10. Hariri S, Qu GZ, Dharmagadda T, et al. Impact analysis of faults and attacks in large-scale networks. IEEE Security and Privacy, 2003, 1(5): 49-54.
11. Cohen F. Managing network security attack and defense strategies. 2004. http://www.blacksheepnetworks.com/security/info/misc/9907.html
12. Blyth A. Footprinting for intrusion detection and threat assessment. Information Security Technical Report, 1999, 4(3): 43-53.
13. Wang CX, Wulf WA. Towards a framework for security measurement. In: Proc. of the 20th National Information Systems Security Conf. Baltimore, 1997. 7-10. http://csrc.nist.gov/nissc/1997/proceedings/522.pdf
14. Lippmann R, Webster S, Stetson D. The effect of identifying vulnerabilities and patching software on the utility of network intrusion detection. In: Proc. of the 15th Int'l Symp. on Recent Advances in Intrusion Detection. Zurich, 2002. 307-326. http://www.springerlink.com/media/320e3xk18j1vuwbe6k1p/ contributions/w/2/6/5/w265fm4f77n2nm7a.pdf
15. Guo YJ. Theory and Method of Comprehensive Evaluation. Beijing: Science Press, 2002 (in Chinese).
16. Roesch M, Green C. Snort users manual, snort release 2.0.0. 2003. http://www.snort.org/docs/SnortUsersManual.pdf
17. Qu GZ, Pakash J, Kishore R, Hariri S. A framework for network vulnerability analysis. 2003. http://www.ece.arizona.edu/-hpdc/projects/nvat/NV-framework.pdf
18. Project H. Know your enemy: Statistics. 2002. http://www.honeynet.org/papers/stats/
19. Project H. Scan 17. 2002. http://www.honeynet.org/scans/scan17/
20. TM. Serv-U FTP directory traversal vulnerability. 2003. http://www.securityfocus.com/bid/2052