Efficient minimum-cost network hardening via exploit dependency graphs

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2003-January, Issue , 2003, Pages 86-95

  Noel, Steven ^a   Jajodia, Sushil ^a   O'Berry, Brian ^a   Jacobs, Michael ^a  

^a George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLEX NETWORKS; COSTS; HARDENING; SECURITY OF DATA; SECURITY SYSTEMS;

CRITICAL RESOURCES; DEPENDENCY GRAPHS; EXPONENTIAL COMPLEXITY; INITIAL CONDITIONS; MINIMUM-COST NETWORK HARDENINGS; NETWORK HARDENINGS; POLYNOMIAL COMPLEXITY; SECURITY VULNERABILITIES;

NETWORK SECURITY;

EID: 84944727025     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2003.1254313     Document Type: Conference Paper

References (18)

1. th ACM Conference on Computer and Communication Security, November 2000.
2. R. Ritchey, P. Ammann, "Using Model Checking to Analyze Network Vulnerabilities," in Proceedings of IEEE Symposium on Security and Privacy, Oakland, CA, 2000.
3. O. Sheyner, J. Haines, S. Jha, R. Lippmann, J. Wing, "Automated Generation and Analysis of Attack Graphs," in Proceedings of IEEE Symposium on Security and Privacy, Oakland, CA, 2002.
4. th IEEE Computer Security Foundations Workshop, Nova Scotia, Canada, June 2002.
5. R. Baldwin, Kuang: Rule based security checking, technical report, MIT Lab for Computer Science, May 1994.
6. th USENIX Unix Security Symposium, San Jose, CA, 1996.
7. C. Phillips, L. Swiler, "A Graph-Based System for Network-Vulnerability Analysis," in Proceedings of the New Security Paradigms Workshop, Charlottesville, VA, 1998.
8. L. Swiler, C. Phillips, D. Ellis, S. Chakerian, "Computer-Attack Graph Generation Tool," in Proceedings of DARPA Information Survivability Conference & Exposition II, June 2001.
9. J. Dawkins, C. Campbell, J. Hale, "Modeling Network Attacks: Extending the Attack Tree Paradigm," in Proceedings of Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection, Johns Hopkins University, June 2002.
10. th ACM Conference on Computer and Communications Security, Washington, DC, November 2002.
11. S. Jajodia, S. Noel, B. O'Berry, "Topological Analysis of Network Attack Vulnerability," in Managing Cyber Threats: Issues, Approaches and Challenges, V. Kumar, J. Srivastava, A. Lazarevic (eds.), Kluwer Academic Publisher, 2003.
12. E. Mendelson, Introduction to Mathematical Logic, 4th ed., Chapman & Hall, 1997.
13. th Annual Computer Security Applications Conference, Las Vegas, Nevada, December 2002.
14. G. Rohrmair, G. Lowe, "Using CSP to detect Insertion and Evasion Possibilities within the Intrusion Detection Area," in Proceedings of BCS Workshop on Formal Aspects of Security, 2002.
15. R. Ortalo, Y. Deswarte, M. Kaâniche, "Experimenting with Quantitative Evaluation Tools for Monitoring Operational Security," IEEE Transactions on Software Engineering, 25(5):633-650, September/October 1999.
16. F. Cuppens, R. Ortalo, "LAMBDA: A Language to Model a Database for Detection of Attacks," in Proceedings of Third International Workshop on Recent Advances in Intrusion Detection, Toulouse, France, October 2000.
17. S. Templeton, K. Levitt, "A Requires/Provides Model for Computer Attacks," in Proceedings of New Security Paradigms Workshop, Cork Ireland, 2000.
18. th ACM Conference on Computer & Communications Security, Washington D.C., November 2002.