Modeling and Simulation for Security Risk Propagation in Critical Information Systems

Authors:
Young-Gab Kim;Dongwon Jeong;Soo-Hyun Park;Jongin Lim;Doo-Kwon Baik
Affiliations:
Graduate School of Information Management and Security, Center for Information Security Technologies (CIST), Korea University, 1, 5-ga, Anam-dong, SungBuk-gu, 136-701, Seoul, Korea;Dept.of Informatics & Statistics, Kunsan National University, San68, Miryong-dong, Gunsan, Jeolabuk-do, 573-701, Korea;School of Business IT, Kookmin University, 861-1, Chongnung-dong. SungBuk-gu, Seoul, Postfach 136-702, Korea;Graduate School of Information Management and Security, Center for Information Security Technologies (CIST), Korea University, 1, 5-ga, Anam-dong, SungBuk-gu, 136-701, Seoul, Korea;Department of Computer Science & Engineering, Korea University, 1, 5-ga, Anam-dong, SungBuk-gu, 136-701, Seoul, Korea
Venue:
Computational Intelligence and Security
Year:
2007

Citing 7
Cited 0

Probability and statistics with reliability, queuing and computer science applications

Probability and statistics with reliability, queuing and computer science applications
Simulation Modeling and Analysis

Simulation Modeling and Analysis
Code red worm propagation modeling and analysis

Proceedings of the 9th ACM conference on Computer and communications security
How to Own the Internet in Your Spare Time

Proceedings of the 11th USENIX Security Symposium
Worm propagation modeling and analysis under dynamic quarantine defense

Proceedings of the 2003 ACM workshop on Rapid malcode
A security risk analysis model for information systems

AsiaSim'04 Proceedings of the Third Asian simulation conference on Systems Modeling and Simulation: theory and applications
A probabilistic approach to estimate the damage propagation of cyber attacks

ICISC'05 Proceedings of the 8th international conference on Information Security and Cryptology

Quantified Score

Hi-index	0.00

Visualization

Abstract

Existing risk propagation models are limited and inadequate for the analysis of cyber attacks caused by various threats to information systems, because of their limited focus only on one specific threat, such as a single virus or worm. Therefore, we herein propose a risk propagation model based on the Markov process, which can be applied to diverse threats to information systems. Furthermore, simulations including in case a threat occurs related with other threats are performed using five scenarios to verify the proposed model.