Attack-resilient compliance monitoring for large distributed infrastructure systems

Proceedings - 2011 5th International Conference on Network and System Security, NSS 2011

Volumn , Issue , 2011, Pages 192-199

  Montanari, Mirko ^a   Campbell, Roy H ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLIANCE MONITORING; CRITICAL INFRASTRUCTURE SYSTEMS; DISTRIBUTED ARCHITECTURE; DISTRIBUTED INFRASTRUCTURE; DISTRIBUTED SERVERS; ENTERPRISE NETWORKS; INFRASTRUCTURE SYSTEMS; MONITORING SYSTEM; SECURITY ATTACKS; SECURITY POLICY; SECURITY PROPERTIES;

CRITICAL INFRASTRUCTURES; NETWORK ARCHITECTURE; NETWORK SECURITY;

MONITORING;

EID: 81055137255     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICNSS.2011.6060000     Document Type: Article

References (10)

1. K. Dempsey, A. Johnson, A. C. Jones, A. Orebaugh, M. Scholl, and K. Stine, "Information Security Continuous Monitoring for Federal Information Systems and Organizations", NIST, Tech. Rep., 2010.
2. Joint Task Force Transformation Initiative, "Recommended Security Controls for Federal Information Systems and Organizations - SP 800-53", NIST, Tech. Rep. August 2009, 2009.
3. North American Electric Reliability Corporation, "NERC CIP 002-009", NERC - North American Electric Reliability Corporation, Tech. Rep., 2007.
4. Payment Card Industry Security Standards Council, "Payment Card Industry (PCI) Data Security Standard", Tech. Rep. October, 2010.
5. Tenable Network Security, "Nessus: the Network Vulnerability Scanner", 2009. [Online]. Available: http://nessus.org/nessus/
6. X. Ou, W. Boyer, and M. McQueen, "A scalable approach to attack graph generation", in Proceedings of the 13th ACM conference on Computer and communications security. ACM, 2006, p. 345.
7. M. Montanari, E. Chan, K. Larson, W. Yoo, and R. H. Campbell, "Distributed Security Policy Conformance", in IFIP International Information Security Conference, 2011.
8. Z. Anwar and R. Campbell, "Automated Assessment of Compliance with Security Best Practices", Critical Infrastructure Protection II, vol. 290, pp. 173-187, 2009.
9. R. H. Campbell and M. Montanari, "Multi-Aspect Security Configuration Assessment", in ACM Workshop on Assurable & Usable Security Configuration (SafeConfig), 2009.
10. M. Montanari, R. H. Campbell, K. Sampigethaya, and M. Li, "a Security Policy Framework for eEnabled Fleets and Airports", in IEEE Aerospace Conference, 2011.