A comprehensive approach for network attack forecasting

doi:10.1016/j.cose.2015.11.005

A comprehensive approach for network attack forecasting

2016-05-01

40

PRE

AI

M

Mohammad GhasemiGol

A

Abbas Ghaemi‐Bafghi *

H

Hassan Takabi

DOI：10.1016/j.cose.2015.11.005

Original

Original request for help

Save

Abstract

En 中文

Forecasting future attacks is a big challenge for network administrators because future is generally unknown. Nevertheless, some information about the future can help us make better decisions in present time. Attack graph is the most well-known tool for risk assessment and attack prediction. However, it only provides static information about probability of vulnerability exploitation, which is not reliable for predicting the future. Moreover, attack graph does not consider the uncertainty of probabilities. Therefore, the primary goal of this paper is to present an attack forecasting approach that can predict future network attacks with more precision and dynamically adapts to changes in the environment. Our proposed approach handles the uncertainty of attack probabilities and uses additional information, such as intrusion alerts, active responses, and dependency graph in the forecasting process. Experiments show that size and complexity of the proposed forecasting attack graph makes it suitable for predicting future attacks even in large-scale networks. (C) 2016 Elsevier Ltd. All rights reserved.

Keywords:

Network attack forecasting

Uncertainty-aware attack graph

Dependency graph

Intrusion alerts

Intrusion response

A comprehensive approach for network attack forecasting

Abstract

AI Summary

Journal

Organization