Networks Security models Scalability Analysis

Kamal Aldin Yousif Yaseen Kamal Aldin Yousif Yaseen

doi:10.26389/ajsrp.k270119

Kamal Aldin Yousif Yaseen Kamal Aldin Yousif Yaseen

Open Access

https://doi.org/10.26389/ajsrp.k270119

Copy DOI

Abstract

There is an emerging scalability problem with existing security models as the size of the networked systems becoming larger, especially when analyzing all possible attack scenarios. presented the worst case computational complexity analyses based on fully connected topology, but real life networked systems run on various network topologies, and other factors that affect the overall performances of security models. In this research, the scalability of existing security models is evaluated and compared with the HARM in realistic scenarios. Two main tasks in this research are (1) formulating key questions that need to be answered to assess the scalability of security models, and (2) evaluate and compare the scalability of security models using simulations.

Highlights

Cyber-attacks have significant effects in our daily lives, where they target from critical infrastructures down to small home networks
This thesis aims to address the inefficiencies of security models and their analysis methods for modern networked systems, To do so scalable and adaptable security modeling and analysis methods are developed, efficient security assessment methods are developed to formulate countermeasures, and the combined effects of unknown attacks are analyzed to formulate mitigation strategies, A comparative analysis of hierarchical security model and existing security models taking into account their complexities and performances is presented, which showed significant improvements in scalability and adaptability using the hierarchical security model
Five key questions are formulated to compare the scalability of security models: Q1 Was the computational complexity analysis performed? Q2 Was the security model compared with other security models? Q3 Were different network topologies considered? Q4 Were the effects of variable number of vulnerabilities for hosts considered? Q5 Were the different types of vulnerabilities considered? Scalability in the generation and the evaluation phases are taken into account for analyzing the performance of security models, where answers to the key ques- tions are shown in Table 1 and 2 for generation and evaluation phases respec-tively

Summary

Introduction

Cyber-attacks have significant effects in our daily lives, where they target from critical infrastructures down to small home networks. Cyber-attacks are becoming more complex (in terms of their attack patterns, types and methods), which makes harder to defend our networked systems against them. This thesis aims to address the inefficiencies of security models and their analysis methods for modern networked systems, To do so scalable and adaptable security modeling and analysis methods are developed, efficient security assessment methods are developed to formulate countermeasures, and the combined effects of unknown attacks are analyzed to formulate mitigation strategies, A comparative analysis of hierarchical security model and existing security models taking into account their complexities and performances is presented, which showed significant improvements in scalability and adaptability using the hierarchical security model. This thesis presents methods to incorporate unknown attacks into the hierarchical security model, analyses the combined effects of unknown attacks in the networked systems, and provide efficient algorithms to formulate mitigation strategies

Objectives

Methods

Results

Discussion

Conclusion