Deakin University
Browse

File(s) under permanent embargo

Evaluating the effectiveness of security metrics for dynamic networks

conference contribution
posted on 2017-01-01, 00:00 authored by S E Yusuf, Mengmeng Ge, J B Hong, H Alzaid, D S Kim
© 2017 IEEE. It is difficult to assess the security of modern enterprise networks because they are usually dynamic with configuration changes (such as changes in topology, firewall rules, etc). Graphical security models (e.g., Attack Graphs and Attack Trees) and security metrics (e.g., attack cost, shortest attack path) are widely used to systematically analyse the security posture of network systems. However, there are problems using them to assess the security of dynamic networks. First, the existing graphical security models are unable to capture dynamic changes occurring in the networks over time. Second, the existing security metrics are not designed for dynamic networks such that their effectiveness to the dynamic changes in the network is still unknown. In this paper, we conduct a comprehensive analysis via simulations to evaluate the effectiveness of security metrics using a Temporal Hierarchical Attack Representation Model. Further, we investigate the varying effects of security metrics when changes are observed in the dynamic networks. Our experimental analysis shows that different security metrics have varying security posture changes with respect to changes in the network.

History

Event

Trust, Security and Privacy in Computing and Communications. Conference (2017 : Sydney, New South Wales)

Pagination

277 - 284

Publisher

IEEE

Location

Sydney, New South Wales

Place of publication

Piscataway, N.J.

Start date

2017-08-01

End date

2017-08-04

ISBN-13

9781509049059

Language

eng

Publication classification

E1.1 Full written paper - refereed

Title of proceedings

TrustCom 2017 : Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and Communications

Usage metrics

    Research Publications

    Categories

    No categories selected

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC