A distributed security tomography framework to assess the exposure of ICT infrastructures to network threats. (June 2021)

• Record Type: Journal Article
• Authors: Brignoli, M.A.; Caforio, A.P.; Caturano, F.; D'Arienzo, M.; Latini, M.; Matta, W.; Romano, S.P.; Ruggiero, B.
• Is Part Of: Journal of information security and applications. Volume 59(2021)
• Publication Date: 2021-06
• Subjects: Network security -- Key Performance Indicators -- Security metrics -- Network modeling -- Network testbeds; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2021.102833
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: The scope of cyber security becomes wider and wider with time and cyber threats rapidly change. This strongly impacts the performance of companies whose success heavily depends on the health of the underlying network infrastructure. The ability to have a clear understanding of the security exposure of a network in its entirety hence becomes part of the mission of such companies. In this work we present the design and implementation of a distributed measurement solution to assess the cyber security exposure of an ICT Infrastructure. We provide means to define cyber security indicators through an automated and repeatable measurement process. We prove the efficiency of the presented methodology by testing it on real-world infrastructure facilities, discussing the results obtained in two different scenarios: a comparison of networks with different characteristics and a real-time monitoring of the defined metrics.