A service dependency model for cost-sensitive intrusion response

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6345 LNCS, Issue , 2010, Pages 626-642

  Kheir, Nizar ^a,b   Cuppens Boulahia, Nora ^a   Cuppens, Frédéric ^a   Debar, Hervé ^c  

^a ECOLE DES MINES DE NANTES   (France)

^b ORANGE LABS   (France)

^c TELECOM SUDPARIS   (France)

Author keywords

[No Author keywords available]

Indexed keywords

CYBERSECURITY; INTRUSION DETECTION;

COST-SENSITIVE; CYBER ATTACKERS; DEPENDENCY MODEL; INTRUSION DETECTION AND PREVENTION; INTRUSION RESPONSE; INTRUSION RESPONSE SYSTEM; IT SECURITY; SECURITY EXPERTS; SERVICE DEPENDENCY; SYSTEMS CONFIGURATION;

COSTS;

EID: 78049413993     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-15497-3_38     Document Type: Conference Paper

References (26)

1. Aceituno, V.: Return on security investment. ISSA Jounal 1, 16-19 (2006)
2. Ammann, P., Wijesekera, D., Kaushik, S.: Scalable, graph-based network vulnerability analysis. In: Proc. 9th ACM Conf. on Computer and Communications Security, pp. 217-224 (2002)
3. Artz, M. L.: A Network Security Planning Architecture. Ph. D. thesis, Cambrdige: Massachusetts Institute of Technology (May 2002)
4. Balepin, I., Maltsev, S., Rowe, J., Levitt, K.: Using specification-based intrusion detection for automated response. In: Vigna, G., Krügel, C., Jonsson, E. (eds.) RAID 2003. LNCS, vol. 2820, pp. 136-154. Springer, Heidelberg (2003)
5. Cuppens, F., Autrel, F., Yacine Bouzida, J. G., Gombault, S., Sans, T.: Anticorrelation as a criterion to select appropriate counter-measures in an intrusion detection framework. Annals of Telecommunications 61, 197-217 (2006)
6. Dacier, M., Deswarte, Y., Kaaniche, M.: Quantitative assessment of operational security: models and tools. Tech. Rep. 96493, LAAS (May 1996)
7. Dacier, M., Deswartes, Y.: Privilege graph: An extension to the typed access matrix model. In: European Symp. on Research in Computer Security, pp. 319-334 (1994)
8. Debar, H., Thomas, Y., Cuppens, F., Cuppens-Boulahia, N.: Enabling automated threat response through the use of a dynamic security policy. Journal in Computer Virology 3, 195-210 (2007)
9. Foo, B., Wu, Y. S., Mao, Y. C., Bagchi, S., Spafford, E.: Adepts: Adaptive intrusion response using attack graphs in an e-commerce environment. In: Proc. Intr'l Conf. DSN, pp. 508-517 (2005)
10. Jahnke, M., Thul, C., Martini, P.: Graph based metrics for intrusion response measures in computer networks. In: 32nd IEEE Conf. Local Computer Networks (2007)
11. Jajodia, S., Noel, S.: Topological vulnerability analysis: A powerful new approach for network attack prevention, detection, and response. Algorithms, Architectures and Information Systems Security 1, 285-305 (2007)
12. Kheir, N., Debar, H., Cuppens, F., Cuppens-Boulahia, N., Viinikka, J.: A service dependency modeling framework for policy-based response enforcement. In: Flegel, U., Bruschi, D. (eds.) DIMVA 2009. LNCS, vol. 5587, pp. 174-193. Springer, Heidelberg (2009)
13. Kheir, N., Debar, H., Cuppens-Boulahia, N., Cuppens, F., Viinikka, J.: Cost assessment for intrusion response using dependency graphs. In: Proc. IFIP Intrn'l Conf. N2S (2009)
14. Kristensen, L. M., Christensen, S., Jensen, K.: The practitioner's guide to coloured petri nets. Intr'l Journal Software Tools for Technology Transfer, 98-132 (1998)
15. Lee, W., Fan, W., Miller, M., Stolfo, S. J., Zadok, E.: Toward cost-sensitive modeling for intrusion detection and response. Journal of Computer Security 10, 5-22 (2002)
16. Li, N., Mitchell, J., Winsborough, W.: Design of a role-based trust-management framework. In: Proc. IEEE Symp. on Security and Privacy, p. 114 (2002)
17. McMillan, R.: Internet explorer vulnerable to hackers, warn experts. microsoft and avg warn of danger. TechWorld magazine (March 2010)
18. Mead, N. R., McGraw, G.: A portal for software security. In: IEEE Security & Privacy, pp. 75-79 (2005)
19. Microsoft: Why microsoft dynamics for high-tech and electronics manufacturers? Microsoft Dynamics CRM
20. Rajab, M. A., Zarfoss, J., Monrose, F., Terzis, A.: A multifaceted approach to understanding the botnet phenomenon. In: Proc. 6th ACM Conf. Internet measurement, pp. 41-52 (2006)
21. Ross, S., Westerfield, R., Jordan, B.: Fundamentals of Corporate Finance Standard Edition. McGraw-Hill/Irwin (2005)
22. Sandhu, R. S., Coynek, E. J., Feinsteink, H. L., Youmank, C. E.: Role-based access control models. IEEE Computer 29, 38-47 (1996)
23. Sheyner, O., Haines, J., Jha, S., Lippmann, R., Wing, J. M.: Automated generation and analysis of attack graphs. In: IEEE Symp. Security & Privacy (2002)
24. Stakhanova, N., Basu, S., Wong, J.: A taxonomy of intrusion response systems. Intr'l Journal of Information and Computer Security 1, 169-184 (2007)
25. Strasburg, C., Stakhanova, N., Basu, S., Wong, J. S.: Intrusion response cost assessment methodology. In: Proc. ACM Symp. ASIACCS, pp. 388-391 (2009)
26. Toth, T., Kruegel, C.: Evaluating the impact of automated intrusion response mechanisms. In: Proc. 18th Annual Conf. ACSAC (2002)