An Approach for Internal Network Security Metric Based on Attack Probability

Chun Shan,Na Xiao,Benfu Jiang,Fang Guan,Jingfeng Xue

doi:10.1155/2018/3652170

Abstract

A network security metric may provide quantifiable evidence to assist security practitioners in securing computer networks. However, research on security metrics based on attack graph is not applicable to the characteristics of internal attack; therefore we propose an internal network security metric method based on attack probability. Our approach has the following benefits: it provides the method of attack graph simplification with monitoring event node which could solve the attack graph exponential growth with the network size, while undermining the disguise of internal attacks and improving the efficiency of the entire method; the method of attack probability calculation based on simplified attack graph can simplify the complexity of internal attacks and improve the accuracy of the approach.

Highlights

With the rapid development of network and information technology, the role of information system in enterprise becomes more and more important
According to the definition and analysis of internal attacks provided by Computer Emergency Response Team (CERT) [1], the internal attacks have the transparency to defense intercepts, such as access control or firewalls
We propose an internal network security metric method based on attack probability to solve the problem of the existing security metrics based on attack graph lacking the

Summary

Introduction

With the rapid development of network and information technology, the role of information system in enterprise becomes more and more important. It is necessary to build an effective security metric technology for the internal network. By studying some important codes, researchers take necessary precautions against possible errors and give patches of software, so as to improve the overall safety of software. These methods are effective, they are very abstract and not easy to implement, and the results are Security and Communication Networks relatively few. If we start from the known network security vulnerabilities, it is relatively easy, for example, all kinds of graph theory based model checking methods, such as attack graph. We proposed an internal network security metric method based on attack probability to solve the problem of the existing security metrics with attack graph for the internal network

Related Work

An Approach for Internal Network Security Metric Based on Attack Probability

Method:

F Delete the node

Experiment and Analysis

Conclusion