SecureRank: A risk-based vulnerability management scheme for computing infrastructures

IEEE International Conference on Communications

Volumn , Issue , 2007, Pages 1455-1460

  Ann Miura Ko, R ^a   Bambos, Nicholas ^b  

^a Stanford University   (United States)

^b STANFORD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

RANDOM ATTACKER; VULNERABILITY MANAGEMENT;

COMPUTER CRIME; COMPUTER SYSTEMS; INFORMATION TECHNOLOGY; RANDOM PROCESSES; TOPOLOGY;

RISK MANAGEMENT;

EID: 38549087035     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2007.244     Document Type: Conference Paper

References (19)

1. "Symantec internet security threat report, march 2006," March 2006.
2. "The laws of vulnerabilities: Six axioms for understanding risk," Qualys, 2 2006. [Online]. Available: http://www.qualys.com/docs/ laws_of_vulnerabilities.pdf
3. C. Zou, W. Gong, and D. Towsley, "Code red worm propagation modeling and analysis," 2002. [Online]. Available: citeseer.ist.psu.edu/zou02code. html
4. "Worm sparks rise in zombie pes," August 2006. [Online]. Available: http://news.com.com/Worm+sparks+rise+in+zombie+PCs/2100-7349_3- 6108409.html?tag=nefd.top
5. Z. Dezso and A.-L. Barabasi, "Halting viruses in scale-free networks," Phys. Rev. E, vol. 65, no. 5, p. 055103, May 2002.
6. J. Vijayan, "Bank's security chief focuses on targeting risk," 2005.
7. "Cvss database guide," September 2006. [Online]. Available: http://www.first.org/cvss/cvss-guide.html
8. J. O. Kephart and S. R. White, "Directed-graph epidemiological models of computer viruses," in Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, 1991, pp. 343-359. [Online]. Available: http://jmvidal.cse.sc.edu/library/kephart91a.pdf
9. R. Albert and A.-L. Barabasi, "Statistical mechanics of complex networks," Reviews of Modern Physics, vol. 74, no. 1, pp. 47-97, January 2002.
10. R. Pastor-Satorras and A. Vespignani, "Epidemic spreading in scale-free networks," 2001. [Online]. Available: citeseer.ist.psu.edu/ 407844.html
11. N. Berger, C. Borgs, J. T. Chayes, and A. Saberi, "On the spread of virases on the internet," in SODA, 2005, pp. 301-310.
12. D. Alderson, L. Li, W. Willinger, and J. C. Doyle, "Understanding internet topology: principles, models, and validation," IEEE/ACM Trans. Netw., vol. 13, no. 6, pp. 1205-1218, 2005.
13. J. Balthrop, S. Forrest, M. J. Newman, and M. M. Williamson, "Technological networks and the spread of computer viruses," Science, vol. 304, no. 5670, pp. 527-529, April 2004. [Online]. Available: http://www.sciencemag.org/cgi/content/full/304/5670/527
14. A. Ganesh, L. Massoulie, and D. Towsley, "The effect of network topology on the spread of epidemics," in INFOCOM 2005. 24th Annual Joint Conference of the IEEE Computer and Communications Societies. Proceedings IEEE, vol. 2, 2005, pp. 1455-1466 vol. 2.
15. L. A. Gordon and M. P. Loeb, "The economics of information security investment," ACM Trans. Inf. Syst. Secur., vol. 5, no. 4, pp. 438-457, 2002.
16. K. S. Hoo, "How much is enough? a risk-management approach to computer security," Ph.D. dissertation, Stanford University, August 2000. [Online]. Available: iis-db.stanford.edu/pubs/11900/soohoo.pdf
17. R. L. Dillon and M. E. Pate-Cornell, "Including technical and security risks in the management of information systems: A programmatic risk, management model." Systems Engineering, vol. 8, no. 1, pp. 15-28, 2005.
18. L. Page, S. Brin, R. Motwani, and T. Winograd, "The pagerank citation ranking: Bringing order to the web," Stanford Digital Library Technologies Project, Tech. Rep., 1998. [Online]. Available: citeseer.ist.psu.edu/page98pagerank.html
19. A. N. Langville and C. D. Meyer, "Deeper inside pagerank," Internet Mathematics, vol. 1, no. 3, pp. 335-380, 2003.