arrow
Return

Towards scalable security analysis using multi-layered security models

delete2016-11-01
delete43
PRE
AI
J
Jin B. Hong *
D
Dong Seong Kim
DOI:10.1016/j.jnca.2016.08.024delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Security models, such as an attack graph (AG), are widely adopted to assess the security of networked systems, such as utilizing various security metrics and providing a cost-effective network hardening solution. There are various methods of generating these models, but the scalability problem exists for single-layered graph-based security models when analyzing all possible attack paths. To address this problem, we propose to use a multi-layer hierarchical attack representation model (HARM) that models various components in the networked system in different layers to reduce the computational complexity. First, we formulate key questions that need to be answered to assess the scalability of security models. Second, we formally define the multi-layer HARM. Last, we conduct experiments to show the scalability of security models. Our experimental results show that using the HARM can improve the scalability of assessing the security of the networked system significantly in comparison to the single-layered security models in various network scenarios. (C) 2016 Elsevier Ltd. All rights reserved.
Keywords:
Attack graphs
Attack trees
Complexity analysis
Scalability
Security analysis
Security model
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

Journal of Network and Computer Applications cover
Journal of Network and Computer Applications
IF:
8
Papers:
3.6K
Citations:
1.1W

Organization

U
University of Canterbury
Scholars:
6.9K
Papers: 7.1K
Citations: 7.8K