Attack graph generation and analysis

Authors:
Jeannette M. Wing
Affiliations:
Carnegie Mellon University, Pittsburgh, Pennsylvania
Venue:
ASIACCS '06 Proceedings of the 2006 ACM Symposium on Information, computer and communications security
Year:
2006

Citing 4
Cited 0

Survivability analysis of networked systems

ICSE '01 Proceedings of the 23rd International Conference on Software Engineering
Two Formal Analys s of Attack Graphs

CSFW '02 Proceedings of the 15th IEEE workshop on Computer Security Foundations
Automated Generation and Analysis of Attack Graphs

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Scenario graphs and attack graphs

Scenario graphs and attack graphs

Quantified Score

Hi-index	0.00

Visualization

Abstract

Attack graphs represent the ways in which an adversary can exploit vulnerabilities to break into a system. System administrators analyze these attack graphs to understand where their system's weaknesses lie and to help decide which security measures will be effective to deploy. In practice, attack graphs are produced manually by Red Teams. Construction by hand, however, is tedious, error-prone, and impractical for attack graphs larger than a hundred nodes. In this talk I present a technique, based on model checking, for generating attack graphs automatically. I also describe different analyses that system administrators can perform in trading off one security measure for another or in using attack graphs in intrusion detection. Work on generating attack graphs is joint with Somesh Jha and Oleg Sheyner; on analyzing them, joint with Oleg Sheyner and Oren Dobzinski.