返回
Dynamic Security Risk Management Using Bayesian Attack Graphs
DOI:10.1109/TDSC.2011.34.png)
摘要
En 中文
Security risk assessment and mitigation are two vital processes that need to be executed to maintain a productive IT infrastructure. On one hand, models such as attack graphs and attack trees have been proposed to assess the cause-consequence relationships between various network states, while on the other hand, different decision problems have been explored to identify the minimum-cost hardening measures. However, these risk models do not help reason about the causal dependencies between network states. Further, the optimization formulations ignore the issue of resource availability while analyzing a risk model. In this paper, we propose a risk management framework using Bayesian networks that enable a system administrator to quantify the chances of network compromise at various levels. We show how to use this information to develop a security mitigation and management plan. In contrast to other similar models, this risk model lends itself to dynamic analysis during the deployed phase of the network. A multiobjective optimization platform provides the administrator with all trade-off information required to make decisions in a resource constrained environment.
Keyword:
Security risk assessment
mitigation analysis
Bayesian belief networks
attack graph
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
7.5
论文数:
2.6K
被引数:
9.6K
机构
引用论文
Heteroleptic half-sandwich Ru(II), Rh(III) and Ir(III) complexes based on 5-ferrocenyldipyrromethene
Encephalocele-Associated Drug-Resistant Epilepsy of Adult Onset: Diagnosis, Management, and Outcomes

