Ranking attack graphs

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4219 LNCS, Issue , 2006, Pages 127-144

  Mehta, Vaibhav ^a   Bartzis, Constantinos ^a   Zhu, Haifeng ^a   Clarke, Edmund ^a   Wing, Jeannette ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Attack graph; Attack model; Google pagerank; Model checking; Security metric

Indexed keywords

ALGORITHMS; APPROXIMATION THEORY; COMPUTER CRIME; COMPUTER SIMULATION; MATHEMATICAL MODELS; PROBABILITY; SECURITY OF DATA;

ATTACK GRAPH; ATTACK MODEL; GOOGLE PAGERANK; MODEL CHECKING; SECURITY METRIC;

GRAPH THEORY;

EID: 33750288536     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11856214_7     Document Type: Conference Paper

References (25)

1. Monica Bianchini, Marci Gori, and Franco Scarselli. Inside pagerank. In ACM Transactions on Internet Technology, pages 92-128, 2005.
2. Sergey Brin and Larry Page. Anatomy of a large-scale hypertextual web search engine. In Proceedings of the 7th International World Wide Web Conference, Brisbane, Australia, 1998.
3. E. Clarke, O. Grumberg, and D. Peled. Model checking, In MIT Press, 2000.
4. M. Dacier, Y. Deswarte, and M. Kaaniche. Quantitative assessment of operational security; Models and tools. Technical Report 96493, LAAS, May 1996.
5. J. Dawkins and J. Hale. A systematic approach to multi-stage network attack analysis. In Proceedings of the Second IEEE International Information Assurance Workshop, 2004.
6. T. Haveliawala. Efficient computation of pagerank, In Stanford DB Group Technical Report, 1999.
7. T. Haveliawala, S. Kamvar, and G. Jeh. An analytical comparison of approaches to personalizing pagerank. In Stanford University Technical Report, 2003.
8. S. Jha, O. Sheyner, and J. M. Wing. Minimization and reliability analysis of attack graphs. In CMU CS Technical Report, Feb 2002.
9. S. Jha, O. Sheyner, and J.M. Wing. Two formal analyses of attack graphs. In Proceedings of the 15th IEEE Computer Security Foundations Workshop, pages 49-63, Nova Scotia, Canada, June 2002.
10. Somesh Jha and Jeannette M. Wing, Survivability analysis of networked systems. In 23rd International Conference on Software Engineering(ICSE'01), page 0307, 2001.
11. S. Kamvar, T. Haveliawala, and G. Golub, Adaptive methods for the computation of pagerank. In Stanford University Technical Report, 2003.
12. S. Kamvar, T. Haveliawala, C. Manning, and G. Golub. Exploiting the block structure of the web for computing pagerank. In Stanford University Technical Report, 2003.
13. S. Kamvar, T. Haveliawala, C. Manning, and G. Golub. Extrapolation methods for accelerating pagerank computations, In Proceedings of the Twelfth International World Wide Web Conference, 2003.
14. A. Kuehlmann, K. L. McMilan, and R. K. Brayton. Probabilistic state space search. In Proceedings of ACM/IEEE international conference on Computer Aided Design, 1999.
15. Amy N. Langville and Carl D. Meyer. Deeper inside pagerank, In Internet Mathematics, pages 335-400, 2004.
16. Chris Pan-Chi Lee, Gene H. Golub, and Stefanos A. Zenios. A fast two-stage algorithm for computing pagerank and its extensions. In Scientific Computation and Computational Mathematics, 2003.
17. B. B. Madan, K. G. Popstojanova, K. Vaidyanathan, and K. S. Trivedi. A method for modeling and quantifying the security attributes of intrusion tolerant systems. In Dependable Systems and Networks-Performance and Dependability Symposium, pages 167-186, 2004.
18. S. Noel and S. Jajodia. Managing attack graph complexity through visual hierarchical aggregation. In Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, Washington DC, USA, 2004.
19. R. Ortalo, Y. Deshwarte, and M. Kaaniche. Experimenting with quantitative evaluation tools for monitoring operational security. In IEEE Transactions on Software Engineering, pages 633-650, Oct 1999.
20. C.A. Phillips and L. P. Swiler, A graph-based system for network vulnerability analysis. In Proceedings of the DARPA Information Survivability Conference and Exposition, pages 71-79, June 2000.
21. O. Sheyner, J.Haines S. Jha, R. Lippmann, and J.M. Wing. Automated generation and analysis of attack graphs. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 2002.
22. O. Sheyner and J.M. Wing. Tools for generating and analyzing attack graphs. In Proceedings of Workshop on Formal Methods for Components and Objects, pages 344-371, 2004.
23. S. Staniford, V. Paxson, and N. Weaver. How to own the internet in your spare time. In Proceedings of the 11th USENIX Security symposium, 2002.
24. HF. Zhu, The methematical models of computer virus infection and methods of prevention. In Mini-Micro Systems (Journal of China Computer Society), pages Vol 11, No.7, 14-21, 1990.
25. Cliff C. Zou, Don Towsley, and Weibo Gong. Email virus and worm propagation simulation. In 13th International conference on Computers Communications and Networks, Chicago, Oct. 2004.