Abstract
It is difficult to assess the security of modern enterprise networks because they are usually dynamic with configuration changes (such as changes in topology, firewall rules, etc). Graphical security models (e.g., Attack Graphs and Attack Trees) and security metrics (e.g., attack cost, shortest attack path) are widely used to systematically analyse the security posture of network systems. However, there are problems using them to assess the security of dynamic networks. First, the existing graphical security models are unable to capture dynamic changes occurring in the networks over time. Second, the existing security metrics are not designed for dynamic networks such that their effectiveness to the dynamic changes in the network is still unknown. In this paper, we conduct a comprehensive analysis via simulations to evaluate the effectiveness of security metrics using a Temporal Hierarchical Attack Representation Model. Further, we investigate the varying effects of security metrics when changes are observed in the dynamic networks. Our experimental analysis shows that different security metrics have varying security posture changes with respect to changes in the network.
| Original language | English |
|---|---|
| Title of host publication | Proceedings - 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 11th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Conference on Embedded Software and Systems, Trustcom/BigDataSE/ICESS 2017 |
| Place of Publication | USA |
| Publisher | IEEE, Institute of Electrical and Electronics Engineers |
| Pages | 277-284 |
| Number of pages | 8 |
| ISBN (Electronic) | 9781509049059 |
| DOIs | |
| Publication status | Published - 7 Sep 2017 |
| Externally published | Yes |
| Event | 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 11th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Conference on Embedded Software and Systems, Trustcom/BigDataSE/ICESS 2017 - Sydney, Australia Duration: 1 Aug 2017 → 4 Aug 2017 |
Conference
| Conference | 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 11th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Conference on Embedded Software and Systems, Trustcom/BigDataSE/ICESS 2017 |
|---|---|
| Country | Australia |
| City | Sydney |
| Period | 1/08/17 → 4/08/17 |
Fingerprint
Cite this
}
Evaluating the effectiveness of security metrics for dynamic networks. / Yusuf, Simon Enoch; Ge, Mengmeng; Hong, Jin B.; Alzaid, Hani; Kim, Dong Seong.
Proceedings - 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 11th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Conference on Embedded Software and Systems, Trustcom/BigDataSE/ICESS 2017. USA : IEEE, Institute of Electrical and Electronics Engineers, 2017. p. 277-284 8029451.Research output: Chapter in Book/Conference paper › Conference paper
TY - GEN
T1 - Evaluating the effectiveness of security metrics for dynamic networks
AU - Yusuf, Simon Enoch
AU - Ge, Mengmeng
AU - Hong, Jin B.
AU - Alzaid, Hani
AU - Kim, Dong Seong
PY - 2017/9/7
Y1 - 2017/9/7
N2 - It is difficult to assess the security of modern enterprise networks because they are usually dynamic with configuration changes (such as changes in topology, firewall rules, etc). Graphical security models (e.g., Attack Graphs and Attack Trees) and security metrics (e.g., attack cost, shortest attack path) are widely used to systematically analyse the security posture of network systems. However, there are problems using them to assess the security of dynamic networks. First, the existing graphical security models are unable to capture dynamic changes occurring in the networks over time. Second, the existing security metrics are not designed for dynamic networks such that their effectiveness to the dynamic changes in the network is still unknown. In this paper, we conduct a comprehensive analysis via simulations to evaluate the effectiveness of security metrics using a Temporal Hierarchical Attack Representation Model. Further, we investigate the varying effects of security metrics when changes are observed in the dynamic networks. Our experimental analysis shows that different security metrics have varying security posture changes with respect to changes in the network.
AB - It is difficult to assess the security of modern enterprise networks because they are usually dynamic with configuration changes (such as changes in topology, firewall rules, etc). Graphical security models (e.g., Attack Graphs and Attack Trees) and security metrics (e.g., attack cost, shortest attack path) are widely used to systematically analyse the security posture of network systems. However, there are problems using them to assess the security of dynamic networks. First, the existing graphical security models are unable to capture dynamic changes occurring in the networks over time. Second, the existing security metrics are not designed for dynamic networks such that their effectiveness to the dynamic changes in the network is still unknown. In this paper, we conduct a comprehensive analysis via simulations to evaluate the effectiveness of security metrics using a Temporal Hierarchical Attack Representation Model. Further, we investigate the varying effects of security metrics when changes are observed in the dynamic networks. Our experimental analysis shows that different security metrics have varying security posture changes with respect to changes in the network.
KW - Attack Graphs
KW - Attack Trees
KW - Cyber Security
KW - Graphical Security Models
KW - Security Assessment
UR - http://www.scopus.com/inward/record.url?scp=85032384769&partnerID=8YFLogxK
U2 - 10.1109/Trustcom/BigDataSE/ICESS.2017.248
DO - 10.1109/Trustcom/BigDataSE/ICESS.2017.248
M3 - Conference paper
SP - 277
EP - 284
BT - Proceedings - 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 11th IEEE International Conference on Big Data Science and Engineering and 14th IEEE International Conference on Embedded Software and Systems, Trustcom/BigDataSE/ICESS 2017
PB - IEEE, Institute of Electrical and Electronics Engineers
CY - USA
ER -