Combinatorial analysis of network security

Steven E. Noel; Brian O'Berry; Charles Hutchinson; Sushil Jajodia; Lynn M. Keuthan; Andy Nguyen

doi:10.1117/12.458763

8 March 2002 Combinatorial analysis of network security

Steven E. Noel, Brian O'Berry, Charles Hutchinson, Sushil Jajodia, Lynn M. Keuthan, Andy Nguyen

Proceedings Volume 4738, Wavelet and Independent Component Analysis Applications IX; (2002) https://doi.org/10.1117/12.458763
Event: AeroSense 2002, 2002, Orlando, FL, United States

Abstract

We extend the traditional analysis of network vulnerability by searching for sequences of exploited vulnerabilities distributed throughout a network. While vulnerabilities considered in isolation may seem innocuous, when considered in combination they may lead to serious security breaches. Our approach establishes encoding rules to reason about interdependent vulnerabilities and exploits. It then reasons about the rules to perform critical failure analysis for a given network. We have developed a prototype software tool for automating the analysis, which can be integrated with existing network security tools such as vulnerability databases and network discovery tools. We demonstrate our approach through an example application. We also perform a scaling experiment to show the performance of our approach for larger networks.

Citation Download Citation

Steven E. Noel, Brian O'Berry, Charles Hutchinson, Sushil Jajodia, Lynn M. Keuthan, and Andy Nguyen "Combinatorial analysis of network security", Proc. SPIE 4738, Wavelet and Independent Component Analysis Applications IX, (8 March 2002); https://doi.org/10.1117/12.458763

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available