File(s) under permanent embargo

Evaluating the effectiveness of security metrics for dynamic networks

conference contribution
posted on 2017-01-01, 00:00 authored by S E Yusuf, Mengmeng Ge, J B Hong, H Alzaid, D S Kim
© 2017 IEEE. It is difficult to assess the security of modern enterprise networks because they are usually dynamic with configuration changes (such as changes in topology, firewall rules, etc). Graphical security models (e.g., Attack Graphs and Attack Trees) and security metrics (e.g., attack cost, shortest attack path) are widely used to systematically analyse the security posture of network systems. However, there are problems using them to assess the security of dynamic networks. First, the existing graphical security models are unable to capture dynamic changes occurring in the networks over time. Second, the existing security metrics are not designed for dynamic networks such that their effectiveness to the dynamic changes in the network is still unknown. In this paper, we conduct a comprehensive analysis via simulations to evaluate the effectiveness of security metrics using a Temporal Hierarchical Attack Representation Model. Further, we investigate the varying effects of security metrics when changes are observed in the dynamic networks. Our experimental analysis shows that different security metrics have varying security posture changes with respect to changes in the network.



Trust, Security and Privacy in Computing and Communications. Conference (2017 : Sydney, New South Wales)


277 - 284




Sydney, New South Wales

Place of publication

Piscataway, N.J.

Start date


End date






Publication classification

E1.1 Full written paper - refereed

Title of proceedings

TrustCom 2017 : Proceedings of the IEEE International Conference on Trust, Security and Privacy in Computing and Communications