Vulnerability association evaluation of Internet of thing devices based on attack graph. (May 2022)
- Record Type:
- Journal Article
- Title:
- Vulnerability association evaluation of Internet of thing devices based on attack graph. (May 2022)
- Main Title:
- Vulnerability association evaluation of Internet of thing devices based on attack graph
- Authors:
- Ma, Yao
Wu, Yuting
Yu, Dan
Ding, Lv
Chen, Yongle - Abstract:
- Device vulnerabilities emerge one after another in the Internet of thing environment, the attackers attack vulnerabilities on several low-level devices simultaneously by multi-step attack method to trigger the vulnerabilities on other high-level devices to damage or control the information system. Considering the correlation between device vulnerabilities, we proposed a method based on attack graph to evaluate vulnerability risk in order to ensure Internet of thing network security. First, according to the type, version, and other relevant information of device vulnerabilities in the Internet of thing environment, hidden Markov model can be used to model the association between device states. Second, analyze the possible attacks on the vulnerabilities on the device, and generate the attack graph according to the correlation between the device states and the relevant information of the vulnerabilities in the device. Finally, the vulnerabilities are objectively and accurately evaluated according to the attack graph. The experiments results show that the proposed method can map the relationship between devices more accurately and objectively and improve the efficiency and accuracy of the vulnerability evaluation.
- Is Part Of:
- International journal of distributed sensor networks. Volume 18:Number 5(2022)
- Journal:
- International journal of distributed sensor networks
- Issue:
- Volume 18:Number 5(2022)
- Issue Display:
- Volume 18, Issue 5 (2022)
- Year:
- 2022
- Volume:
- 18
- Issue:
- 5
- Issue Sort Value:
- 2022-0018-0005-0000
- Page Start:
- Page End:
- Publication Date:
- 2022-05
- Subjects:
- Vulnerability assessment -- hidden Markov model -- device association -- attack graph -- IoT
Sensor networks -- Periodicals
Intelligent agents (Computer software) -- Periodicals
Multisensor data fusion -- Periodicals
681.2 - Journal URLs:
- http://www.informaworld.com/smpp/title~content=t714578688~db=all ↗
http://www.metapress.com/openurl.asp?genre=journal&issn=1550-1329 ↗
http://dsn.sagepub.com/ ↗
http://www.tandfonline.com/ ↗ - DOI:
- 10.1177/15501329221097817 ↗
- Languages:
- English
- ISSNs:
- 1550-1329
- Deposit Type:
- Legaldeposit
- View Content:
- Available online (eLD content is only available in our Reading Rooms) ↗
- Physical Locations:
- British Library DSC - 4542.186400
British Library DSC - BLDSS-3PM
British Library HMNTS - ELD Digital store - Ingest File:
- 20912.xml