Virtual terrain: A security-based representation of a computer network

Proceedings of SPIE - The International Society for Optical Engineering

Volumn 6973, Issue , 2008, Pages

  Holsopple, Jared ^a   Yang, Shanchieh ^b   Argauer, Brian ^b  

^a CUBRC   (United States)

^b Kate Gleason College of Engineering   (United States)

Author keywords

Alert correlation; Computer network; Cyber security; Impact assessment; Information fusion; Network modeling; Threat assessment

Indexed keywords

AD HOC NETWORKS; COMPUTER CRIME; GRAPH THEORY; MATHEMATICAL MODELS; SECURITY OF DATA; USER INTERFACES; VIRTUAL REALITY;

ALERT CORRELATION; CYBER SECURITY; IMPACT ASSESSMENT; NETWORK MODELING; THREAT ASSESSMENT;

COMPUTER NETWORKS;

EID: 43249121200     PISSN: 0277786X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1117/12.776980     Document Type: Conference Paper

References (16)

1. Argauer, B. VTAC: Virtual Terrain Assisted Impact Assessment for Cyber Attacks. Master's Thesis. Rochester Institute of Technology, 2007.
2. Bass, T. "Intrusion detection systems and multisensor data fusion," Communications of the ACM 43, April 2000.
3. Holsopple, J., Yang, S. J. and Sudit, M. TANDI: Threat assessment for networked data and information. In Proceedings of SPIE, Defense and Security Symposium, vol. 6242, April 2006.
4. Phillips, C. and Swiler, L. A graph-based system for network vulnerability analysis. In Proceedings of the 1998 workshop on New security paradigms, pages 71-79, New York, NY, USA, 1998. ACM Press.
5. Jajodia, S., S. Noel and B. O'Berry. Topological analysis of network attack vulnerability. Managing Cyber Threats: Issues, Approaches, and Challenges. 2003
6. Lippman, R. and Ingols, K. An annotated review of past papers on attack graphs. Technical Report ESC-TR-2005-054. Lincoln Laboratory, Massachusetts Institute of Technology, Lexington, MA. March 2005.
7. Mitre, "Common vulnerabilities and exposures (CVE dictionary)." http://cve.mitre.org, 2007.
8. Ning, P. and Xu, D. Learning attack strategies from intrusion alerts, In the Proceedings of the 1-th ACM Conference on Computer and Communications Security, New York: ACM Press, pp. 200-209.
9. OPNET Technologies Inc., http://www.opnet.com.
10. Schneier, B. Attack Trees. Dr Dobb's Journal. December 1999.
11. Sourcefire, "Snort: an open source network intrusion prevention and detection system." http://www.snort.org, 2007.
12. M. Sudit, A. Stotz, and M. Holender, "Situational awareness of a coordinated cyber attack," in Proceedings of SPIE, Defense and Security Symposium, pp. 114-129, March 2005.
13. T. N. S. Inc., "Nessus vulnerability scanner." http://www.nessus.org/, 2007.
14. F. Valeur, G. Vigna, C. Kruegel, and R. A. Kemmerer, "A comprehensive approach to intrusion detection alert correlation," IEEE Transactions on Dependable and Secure Computing 1, pp. 146-169, July-Sep 2004.
15. Vidalis, S. and Jones A. Using vulnerability trees for decision making in threat assessment. Technical Report CS03-2, University of Glamorgan, School of Computing, June 2003.
16. Yang, S. J., et al. Terrain and Behavior Modeling for Projecting Multistage Cyber Attacks. In proceedings of International Data Fusion Conference. Quebec, Canada. July 2007.