arrow
返回

ILLATION: Improving Vulnerability Risk Prioritization by Learning From Network

delete2024-07-01
delete0
PRE
AI
Z
Zhen Zeng *
D
Dijiang Huang
G
Guoliang Xue
Y
Yuli Deng
N
Neha Vadnere
L
Liguang Xie
DOI:10.1109/TDSC.2023.3294433delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Network administrators face the challenge of efficiently patching overwhelming volumes of vulnerabilities with limited time and resources. To address this issue, they must prioritize vulnerabilities based on the associated risk/severity measurements (i.e., CVSS). Existing solutions struggle to efficiently patch thousands of vulnerabilities on a network. This article presents ILLATION, a proof-of-concept model that provides network-specific vulnerability risk prioritization to support efficient patching. ILLATION integrates AI techniques, such as neural networks and logical programming, to learn risk patterns from adversaries, vulnerability severity, and the network environment. It provides an integrated solution that learns and infers adversaries' motivation and ability in a network while also learning the constraints that restrict interactions between vulnerabilities and network elements. An evaluation of ILLATION against CVSS base and environmental metrics shows that it reflects changes in vulnerability scores and prioritization ranks as the same pattern as the CVSS model while identifying vulnerabilities with similar risk patterns to given adversaries better. On a simulated network with up to 10 k vulnerable hosts and vulnerabilities, ILLATION can assess 1 k vulnerabilities in about 4.5 minutes total, with an average running time of 0.19 seconds per vulnerability on a general-purpose computer.
Keyword:
Vulnerability prioritization
logic reasoning
network security
cloud security
Vulnerability prioritization
logic reasoning
network security
cloud security

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.6K
被引数:
9.6K

机构

University of Wisconsin System 封面图
University of Wisconsin System
学者数:
6.7W
论文数: 5.8W
被引数: 382
引用论文

引用论文

Chromis-1, a Ratiometric Fluorescent Probe Optimized for Two-Photon Microscopy Reveals Dynamic Changes in Labile Zn(II) in Differentiating Oligodendrocytes
err2018-02-12
err0
errOAAI
errDaisy Bourassa; Christopher M. Elitt; Adam M. McCallum; S. Sumalekshmy; Reagan L. McRae; M. Thomas Morgan; Nisan Siegel; Joseph W. Perry; Paul A. Rosenberg; Christoph J. Fahrni
err分享
err收藏
err分享
err收藏
Influence of P53 on the radiotherapy response of hepatocellular carcinoma
err2015-01-01
err0
errOAAI
errAna R. Gomes; Ana M. Abrantes; Ana F. Brito; Mafalda Laranjo; João E. Casalta-Lopes; Ana C. Gonçalves; Ana B. Sarmento-Ribeiro; Maria F. Botelho; José G. Tralhão
err分享
err收藏
err分享
err收藏
Dopamine receptor-mediated regulation of neuronal “clock” gene expression
err2009-01-01
err0
errOAAI
errM. Imbesi; S. Yildiz; A. Dirim Arslan; R. Sharma; H. Manev; T. Uz
err分享
err收藏
err分享
err收藏
学者 查看更多内容