Automated generation and analysis of attack graphs

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2002-January, Issue , 2002, Pages 273-284

  Sheyner, O ^a   Haines, J ^b   Jha, S ^c   Lippmann, R ^b   Wing, J M ^a  

^a Carnegie Mellon University   (United States)

^b MIT LINCOLN LABORATORY   (United States)

^c University of Wisconsin Madison   (United States)

Author keywords

Privacy; Security

Indexed keywords

COMPUTER SYSTEM FIREWALLS; COST EFFECTIVENESS; DATA PRIVACY; GRAPHIC METHODS; INTRUSION DETECTION; MODEL CHECKING;

AUTOMATED GENERATION; AUTOMATED TECHNIQUES; COST EFFECTIVE; INTEGRAL PART; INTRUSION DETECTION SYSTEMS; SECURITY; SMALL NETWORKS; SYMBOLIC MODEL CHECKING;

NETWORK SECURITY;

EID: 44049089202     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECPRI.2002.1004377     Document Type: Conference Paper

References (25)

1. AT & T Labs. Graphviz - open source graph drawing software. http://www.research.att.com/sw/tools/graphviz/.
2. R. Bryant. Graph-based algorithms for boolean function manipulation. IEEE Transactions on Computers, C-35(8):677-691, Aug. 1986.
3. 20 states and beyond. Information and Computation, 98(2):142-170, June 1992.
4. E. Clarke, O. Grumberg, and D. Peled. Model Checking. MIT Press, 2000.
5. W. Consortium. Extensible Markup Language (XML) 1.0. http://www.w3.org/TR/REC-xml, February 1998.
6. T. Cormen, C. Leiserson, and R. Rivest. Introduction to Algorithms. MIT Press, 1985.
7. F. Cuppens and R. Ortalo. Lambda: A language to model a database for detection of attacks. In Proceedings of the Third International Workshop on the Recent Advances in Intrusion Detection (RAID), number 1907 in LNCS, pages 197-216. Springer-Verlag, 2000.
8. M. Dacier. Towards Quantitative Evaluation of Computer Security. PhD thesis, Institut National Polytechnique de Toulouse, Dec. 1994.
9. R. Deraison. Nessus Scanner. http://www.nessus.org.
10. D. Farmer and E. Spafford. The COPS security checker system. In Proceedings of the Summer Usenix Conference, 1990.
11. M. Garey and D. Johnson. Computers and Intractability: A Guide to the Theory of NP-Completeness. W.H. Freeman and Company, San Francisco, 1979.
12. S. Jha, O. Sheyner, and J. M. Wing. Minimization and reliability analyses of attack graphs. Technical Report CMU-CS-02-109, Carnegie Mellon University, February 2002.
13. S. Jha and J. Wing. Survivability analysis of networked systems. In Proceedings of the International Conference on Software Engineering, Toronto, Canada, May 2001.
14. R. Kurshan. Computer-Aided Verification of Coordinating Processes: The Automata-Theoretic Approach. Princeton University Press, 1994.
15. K. McMillan and J. Schwalbe. Formal verification of the Gigamax cache consistency protocol. In N. Suzuki, editor, Shared Memory Multiprocessing. MIT Press, 1992.
16. NuSMV. NuSMV: A New Symbolic Model Checker. http://afrodite.itc.it:1024/~nusmv/.
17. R. Ortalo, Y. Dewarte, and M. Kaaniche. Experimenting with quantitative evaluation tools for monitoring operational security. IEEE Transactions on Software Engineering, 25(5):633-650, September/October 1999.
18. C. Phillips and L. Swiler. A graph-based system for network vulnerability analysis. In New Security Paradigms Workshop, pages 71-79, 1998.
19. M. Puterman. Markov Decision Processes. John Wiley & Sons, New York, NY, 1994.
20. R. Ritchey and P. Ammann. Using model checking to analyze network vulnerabilities. In Proceedings of the IEEE Symposium on Security and Privacy, pages 156-165, May 2001.
21. B. Schneier. Modeling security threats. Dr. Dobb's Journal, December 1999.
22. SMV. SMV: A Symbolic Model Checker. http://www.cs.emu.edu/~modelcheck/.
23. L. Swiler, C. Phillips, D. Ellis, and S. Chakerian. Computer-attack graph generation tool. In Proceedings of the DARPA Information Survivability Conference and Exposition, June 2000.
24. S. Templeton and K. Levitt. A requires/provides model for computer attacks. In Proceedings of the New Security Paradigms Workshop, Cork, Ireland, 2000.
25. G. Vigna and R. Kemmerer. Netstat: A network-based intrusion detection system. Journal of Computer Security, 7(1), 1999.