Topological vulnerability analysis: A powerful new approach for network attack prevention, detection, and response

Algorithms, Architectures And Information Systems Security

Volumn , Issue , 2008, Pages 285-305

  Jajodia, Sushil ^a   Noel, Steven ^a  

^a George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 85116520518     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1142/9789812836243_0013     Document Type: Chapter

References (20)

1. S. Jajodia, S. Noel, and B. O’Berry (2005) Topological Analysis of Network Attack Vulnerability, in Managing Cyber Threats: Issues, Approaches and Challenges, V. Kumar, J. Srivastava, A. Lazarevic (eds.), Kluwer Academic Publisher.
2. R. Deraison, Nessus, http://www.nessus.org, last retrieved April 2007.
3. 3eEye Digital Security, Retina Network Security Scanner, last retrieved April 2007.
4. Foundstone, FoundScan Frequently Asked Questions, http://www.foundstone. com/pdf/foundscan_general_faq.pdf, last retrieved April 2007.
5. Symantec Corporation, Symantec Discovery Overview, http://www.symantec. com/enterprise/products/overview.jsp?pcid=1025/&pvid=923_1, last retrieved April 2007.
6. Symantec Corporation, Symantec DeepSight Threat Management System, http:// tms.symantec.com/Default.aspx, last retrieved April 2007.
7. Security Focus, Bugtraq Vulnerabilities, http://www.securityfocus.com/ vulnerabilities, last retrieved April 2007.
8. MITRE Corporation, CVE-Common Vulnerabilities and Exposures, http://cve. mitre.org/, last retrieved April 2007.
9. Sourcefire, Snort-The De Facto Standard for Intrusion Detection/Prevention, http://www.snort.org/, last retrieved April 2007.
10. O. Sheyner, J. Haines, S. Jha, R. Lippmann, J. Wing, “Automated Generation and Analysis of Attack Graphs, " in Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA.
11. S. Jha, O. Sheyner, J. Wing, Two Formal Analyses of Attack Graphs, in Proceedings of the 15th Computer Security Foundation Workshop, Nova Scotia, Canada.
12. P. Ammann, D.Wijesekera, S. Kaushik, Scalable, Graph-Based Network Vulnerability Analysis, in Proceedings of the 9th ACM Conference on Computer and Communications Security, Washington, DC.
13. S. Noel, S. Jajodia, B. O’Berry, M. Jacobs, Efficient Minimum-Cost Network Hardening via Exploit Dependency Graphs, in Proceedings of the 19th Annual Computer Security Applications Conference, Las Vegas, Nevada.
14. L. Wang, S. Noel, S. Jajodia, Minimum-Cost Network Hardening Using Attack Graphs, Computer Communications, 29(18), pp. 3812-3824.
15. S. Noel, S. Jajodia, Managing Attack Graph Complexity through Visual Hierarchical Aggregation, in Proceedings of the ACM CCS Workshop on Visualization and Data Mining for Computer Security Fairfax, Virginia.
16. S. Noel, M. Jacobs, P. Kalapa. S. Jajodia, Multiple Coordinated Views for Network Attack Graphs, in Proceedings of the 2nd International Workshop on Visualization for Computer Security, Minneapolis, Minnesota.
17. P. Ning, Y. Cui, D. Reeves, Constructing Attack Scenarios through Correlation of Intrusion Alerts, in Proceedings of the 9th ACM Conference on Computer and Communications Security, Washington, DC.
18. S. Noel, E. Robertson, S. Jajodia, Correlating Intrusion Events and Building Attack Scenarios through Attack Graph Distances, in Proceedings of the 20th Annual Computer Security Applications Conference, Tucson, Arizona.
19. L. Wang, A. Liu, S. Jajodia, An Efficient and Unified Approach to Correlating, Hypothesizing, and Predicting Network Intrusion Alerts, in Proceedings of the 10th European Symposium on Research in Computer Security, Milan, Italy.
20. L.Wang, A. Liu, S. Jajodia, Using Attack Graphs for Correlating, Hypothesizing, and Predicting Network Intrusion Alerts, Computer Communications, 29(15).