An Approach for Internal Network Security Metric Based on Attack Probability. (24th April 2018)

• Record Type: Journal Article
• Authors: Shan, Chun; Jiang, Benfu; Xue, Jingfeng; Guan, Fang; Xiao, Na
• Other Names: Yan Zheng Academic Editor.
• Is Part Of: Security and communication networks. Volume 2018(2018)
• Publication Date: 2018-04-24
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1155/2018/3652170
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract : A network security metric may provide quantifiable evidence to assist security practitioners in securing computer networks. However, research on security metrics based on attack graph is not applicable to the characteristics of internal attack; therefore we propose an internal network security metric method based on attack probability. Our approach has the following benefits: it provides the method of attack graph simplification with monitoring event node which could solve the attack graph exponential growth with the network size, while undermining the disguise of internal attacks and improving the efficiency of the entire method; the method of attack probability calculation based on simplified attack graph can simplify the complexity of internal attacks and improve the accuracy of the approach.