Evaluating the effectiveness of security metrics for dynamic networks
Version 2 2024-06-13, 13:24Version 2 2024-06-13, 13:24
Version 1 2019-11-18, 11:47Version 1 2019-11-18, 11:47
conference contribution
posted on 2024-06-13, 13:24 authored by SE Yusuf, M Ge, JB Hong, H Alzaid, DS Kim© 2017 IEEE. It is difficult to assess the security of modern enterprise networks because they are usually dynamic with configuration changes (such as changes in topology, firewall rules, etc). Graphical security models (e.g., Attack Graphs and Attack Trees) and security metrics (e.g., attack cost, shortest attack path) are widely used to systematically analyse the security posture of network systems. However, there are problems using them to assess the security of dynamic networks. First, the existing graphical security models are unable to capture dynamic changes occurring in the networks over time. Second, the existing security metrics are not designed for dynamic networks such that their effectiveness to the dynamic changes in the network is still unknown. In this paper, we conduct a comprehensive analysis via simulations to evaluate the effectiveness of security metrics using a Temporal Hierarchical Attack Representation Model. Further, we investigate the varying effects of security metrics when changes are observed in the dynamic networks. Our experimental analysis shows that different security metrics have varying security posture changes with respect to changes in the network.
History
Pagination
277-284Location
Sydney, New South WalesStart date
2017-08-01End date
2017-08-04ISBN-13
9781509049059Language
engPublication classification
E1.1 Full written paper - refereedTitle of proceedings
TrustCom 2017 : Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and CommunicationsEvent
Trust, Security and Privacy in Computing and Communications. Conference (2017 : Sydney, New South Wales)Publisher
IEEEPlace of publication
Piscataway, N.J.Usage metrics
Categories
No categories selectedKeywords
Licence
Exports
RefWorksRefWorks
BibTeXBibTeX
Ref. managerRef. manager
EndnoteEndnote
DataCiteDataCite
NLMNLM
DCDC