Network Security Assessment Research Articles

Risk Assessment of Network Security Based on Non-Optimum Characteristics Analysis

This paper discusses in detail the theory of non-optimum analysis on network systems. It points out that the main problem of exploring indefinite networks’ optimum lies in the lack of non-optimum analysis on the network system. The paper establishes the syndrome and empirical analysis based on the non-optimum category of the network security. At the same time, it also puts forward the non-optimum measurement of the network security along with non-optimum tracing and self-organization of the network systems. The formation of non-optimum network serves as the basis for existence of optimum network. Besides, the level of network security can be measured from the non-optimum characteristics analysis of network systems. By summing the practice, this paper has also come at the minimum non-optimum principle of the network security optimization, established the relationship between risk and non-optimum, and put forward evaluation method about trust degree of network security. Finally, according to the previous practice of network security risk management, a kind of network security optimization has been developed to approach the relationship of non-optimum and risk.

Intelligent network security assessment with modeling and analysis of attack patterns

ABSTRACTThis paper presents a new concept for information security assessments while promoting several areas of its application. Threat generation, attack pattern analysis, quantitative risk computation, and network security monitoring locally or remotely are the major application areas of this concept. Instead of testing assets one by one, by applying separate repetitive attacks and assessments, the presented system generates and executes attacks once on a sample group, composes assessment data, and uses the data for the assessment of an entire network. This unique approach can be used as a model to guide the development of tool‐based assessment systems, intelligent network security analysis, monitoring systems, and also as a complementary function in information security test and evaluation laboratories. Copyright © 2012 John Wiley & Sons, Ltd.

Research of Network Security Situational Assessment Quantization Based on Mobile Agent

Abstract As the security situational assessment widely applying to the computer network field, scholars have designed and implemented a large number of network security situational assessment methods. However, most works are based on local area network and single host, which is hardly to meet the demand of large-scale network security assessment. In this paper, we based on quantitative hierarchical network security situational assessment model, introduced the mobile agent technology, designed the distributed computing for large-scale network and evaluated the whole network security situation for future prediction.

Research on Intrusion Detection Method Based on Neural Network

The research of this dissertation focuses on the quantitative methodologies of the network security assessment. So the dissertation gives the term “Model-based network security risk assessment” a more meaningful definition. The methodology called a model-based will use one network security analysis model to design the scenarios of threatens according to the Patterns behaviors of vulnerabilities and threatens in the network. And then the risk assessment will be done under those scenarios. Following this new definition. The dissertation Proposes a Component-centric Access Graph Based Network Security Risk Assessment Model (Oc-AGNSRAM).

An Approach to Wireless Sensor Network Security Assessment with Fuzzy Number Intuitionistic Fuzzy Information

An Approach to Wireless Sensor Network Security Assessment with Fuzzy Number Intuitionistic Fuzzy Information

A New Method about Port Scan of Network Hosts

To resolve the question: accurately scanned the port of remote network host through firewall, researched deeply on the existing scan methods, found their weakness, provided a new method about port detection through firewall. Described the design thinking and scan process, design the first part of ETHERNET, send out and receive of the data packet was turned from the IP layer to data link layer. delivered the data packet directly to network hosts. At last, developed the network security assessment system based on this way. Test results show that this method can penetrate firewall and accurately scan the port of remote network host.

Study on Risk Assessment of Network Security Based on Game Theory

to strengthen the network security and to enhance the accuracy of the network security risk assessment, the essay conducts game analysis to the security system of protective mechanisms. Using the basic theory of games and the analytical and comparative method, and raising the network security and physical model for the security system, this process will protect and improve the network security. At the aspect of setting the model, we did not rely on the traditional game theory, but creatively set behavior of the game for a large number of players for the limit logos of groups in the model, and paid more attention to the detection system to reach a state of stability. Analysis shows that the proposed models and the method are feasible and effective.

A Novel Attack Graph Posterior Inference Model Based on Bayesian Network

Network attack graphs are originally used to evaluate what the worst security state is when a concerned net-work is under attack. Combined with intrusion evidence such like IDS alerts, attack graphs can be further used to perform security state posterior inference (i.e. inference based on observation experience). In this area, Bayesian network is an ideal mathematic tool, however it can not be directly applied for the following three reasons: 1) in a network attack graph, there may exist directed cycles which are never permitted in a Bayesian network, 2) there may exist temporal partial ordering relations among intrusion evidence that can-not be easily modeled in a Bayesian network, and 3) just one Bayesian network cannot be used to infer both the current and the future security state of a network. In this work, we improve an approximate Bayesian posterior inference algorithm–the likelihood-weighting algorithm to resolve the above obstacles. We give out all the pseudocodes of the algorithm and use several examples to demonstrate its benefit. Based on this, we further propose a network security assessment and enhancement method along with a small network scenario to exemplify its usage.

Research on Security Assessment Model of Water Supply System Based on Leakage Control

Abstract Based on the characteristics of urban water supply system, the urban pipe network security assessment system was established, and then AHP method combined with fuzzy evaluation was used to carry out a comprehensive security assessment for the leakage of the urban pipe network. By calculating a real case and analyzing various leakage causes and their impact, the assessment model was verified reasonable.

A Network Security Risk Assessment Method Based on Immunity Algorithm

Based on the research of domestic and foreign vulnerability assessment systems, in this paper, we propose an improved network security assessment method based on Immunity algorithm. It integrates the advantages of both host based and network based scan system. Our goal is to explore the known security vulnerabilities, and to check hosts’ security effectively as well. It has the features of self-adaptive, distributed, and real time. Therefore, it provides a good solution to risk assessment for network security.

Security-State-Region-Based Model of Network Security Evaluation

PDF HTML阅读 XML下载 导出引用 引用提醒 基于安全状态域的网络评估模型 DOI: 作者: 作者单位: 作者简介: 通讯作者: 中图分类号: 基金项目: Supported by the National Natural Science Foundation of China under Grant No.60403006 (国家自然科学基金); the National Basic Research Program of China under Grant No.2007CB311202 (国家重点基础研究发展计划(973)); the National High-Tech Research and Development Plan of China under Grant Nos.2006AA01Z437, 2006AA01Z412, 2006AA01Z433 (国家高技术研究发展计划(863)) Security-State-Region-Based Model of Network Security Evaluation Author: Affiliation: Fund Project: 摘要 | 图/表 | 访问统计 | 参考文献 | 相似文献 | 引证文献 | 资源附件 | 文章评论 摘要:将基于攻击图的评估与依赖标准的评估相结合,提出了一种基于安全状态域(security state region,简称SSR)的网络安全评估模型(security-state-region-based evaluation model,简称SSREM).该模型将攻击的影响分为攻击能力改变和环境改变,通过两者之间的因果关系建立数学模型,提出了安全状态域趋向指数的概念,借助Matlab进行攻击趋势的曲面拟合,进而进行安全状态域的划分和网络的安全性评估.实验结果表明,依据SSREM进行的评估能够通过安全状态域和安全状态域趋向指数反映网络进入不同状态的难易程度,对网络安全性量化评估具有借鉴意义. Abstract:A security-state-region-based (SSR-based) model called security-state-region-based evaluation model (SSREM) is proposed, which integrates the assessment based on the attack graph and the evaluation according to criteria together. In the model, the attack result is divided into the change in the attack ability and environment. The cause and effect relationship among them lays a foundation for building mathematic equations. After that, the definition of SSR is proposed, and also curve and surface fitting recurring to Matlab is used to analyze the attack trend, the result of which provides a theoretical basis for the division of SSR and the network security assessment based on SSR. Experiments in the posterior part of the paper show that, the evaluation according to SSREM can reflect how difficult it is to enter into different states through SSR and the tendency coefficient of security state region (TC_SSR), which can be used for reference by quantitative evaluation of network security. 参考文献 相似文献 引证文献

A lightweight web-based vulnerability scanner for small-scale computer network security assessment

There appears to be a common perception amongst average computer users pointing towards a global lack of trust when using the Internet. The resolution of this lack of trust relating to the use of the Internet, particularly orientated towards its commercial use and online purchasing, requires partly from website developers to create and maintain web applications that are robust and provide a certain degree of resilience to attack from outside threats. This project intends to contribute to this particular aspect by providing site developers and system testers, as well as simple site users, with a tool for reconnaissance, vulnerability scanning and remote network mapping that is easily accessible and useable due to its web-based and visual, event-driven interface. It is anticipated that the cumbersome task of learning to use a number of command line tools and their exact functionality and parameters can be avoided through this and similar developments, and hence that this will potentially widen the access to security testing, particularly to small and medium businesses.

An assessment of technology-based service encounters & network security on the e-health care systems of medical centers in Taiwan.

BackgroundEnhancing service efficiency and quality has always been one of the most important factors to heighten competitiveness in the health care service industry. Thus, how to utilize information technology to reduce work load for staff and expeditiously improve work efficiency and healthcare service quality is presently the top priority for every healthcare institution. In this fast changing modern society, e-health care systems are currently the best possible way to achieve enhanced service efficiency and quality under the restraint of healthcare cost control. The electronic medical record system and the online appointment system are the core features in employing e-health care systems in the technology-based service encounters.MethodsThis study implemented the Service Encounters Evaluation Model, the European Customer Satisfaction Index, the Attribute Model and the Overall Affect Model for model inference. A total of 700 copies of questionnaires from two authoritative southern Taiwan medical centers providing the electronic medical record system and the online appointment system service were distributed, among which 590 valid copies were retrieved with a response rate of 84.3%. We then used SPSS 11.0 and the Linear Structural Relationship Model (LISREL 8.54) to analyze and evaluate the data.ResultsThe findings are as follows: (1) Technology-based service encounters have a positive impact on service quality, but not patient satisfaction; (2) After experiencing technology-based service encounters, the cognition of the service quality has a positive effect on patient satisfaction; and (3) Network security contributes a positive moderating effect on service quality and patient satisfaction.ConclusionIt revealed that the impact of electronic workflow (online appointment system service) on service quality was greater than electronic facilities (electronic medical record systems) in technology-based service encounters. Convenience and credibility are the most important factors of service quality in technology-based service encounters that patients demand. Due to the openness of networks, patients worry that transaction information could be intercepted; also, the credibility of the hospital involved is even a bigger concern, as patients have a strong sense of distrust. Therefore, in the operation of technology-based service encounters, along with providing network security, it is essential to build an atmosphere of psychological trust.

A risk assessment method of the wireless network security

The core of network security is the risk assessment. In this letter, a risk assessment method is introduced to estimate the wireless network security. The method, which combines Analytic Hierarchy Process (AHP) method and fuzzy logical method, is applied to the risk assessment. Fuzzy logical method is applied to judge the important degree of each factor in the aspects of the probability, the influence and the uncontrollability, not to directly judge the important degree itself. The risk assessment is carved up 3 layers applying AHP method, the sort weight of the third layer is calculated by fuzzy logical method. Finally, the important degree is calculated by AHP method. By comparing the important degree of each factor, the risk which can be controlled by taking measures is known. The study of the case shows that the method can be easily used to the risk assessment of the wireless network security and its results conform to the actual situation.

Assessing the risk situation of network security for active defense

The risk situation assessment and forecast technique of network security is a basic method of active defense techniques. In order to assess the risk of network security two methods were used to define the index of risk and forecast index in time series, they were analytical hierarchy process (AHP) and support vector regression (SVR). The module framework applied the methods above was also discussed. Experiment results showed the forecast values were so close to actual values and so it proved the approach is correct.

An integrated framework for the assessment of network operations, reliability, and security

As a network evolves through new requirements, technology, or applications and becomes more complicated, the ability to provide cost-effective, secure, reliable operations for critical functions and to prevent internal and external assaults on the network is important for network vendors, network operators, and end users. Thus, the goal of network design is a manageable, quantifiably reliable, and secure network that balances end-user requirements and technological capabilities. Unfortunately, quantitative reliability assessment is generally not integrated into the process of designing operations and security, even though designers normally consider reliability when they evaluate various operations and security schemes. In this paper we present — with examples — an integrated framework that makes possible a quantitative reliability assessment of telecommunication services and incorporates the impacts of interruptions on both the operations and the security network infrastructures (i.e., on both the static and the dynamic aspects of the network). The static aspect of the network (i.e., operations) deals with the ability of the network to provide sufficient capacity to handle the traffic for which it was designed. The dynamic aspect (i.e., security) deals with the ability of the network to handle both sudden changes in operating conditions and the loss of components and to deal with internal and external attacks on the network.

Applications of artificial intelligence techniques in wind power generation

The paper presents two applications of Artificial Intelligence techniques, namely Artificial Neural Networks (ANNs) and Decision Trees (DTs), in wind power generation. The first concerns the design procedure of a permanent magnet generator for a 20 kW wind turbine prototype. This work has been developed in the frame of a research project funded by the General Secretariat for Research and Technology of Greece, concerning the design and construction of a gear-less wind turbine for both autonomous and interconnected operation with the electrical grid. The second application concerns the security assessment of networks including wind farms and has been developed in the frame of JOULE-II European Community research programme. The results from the application of ``learning from examples'' methods, namely ANNs and DTs, for the fast dynamic security assessment of the power system of Lemnos island are presented and comparatively assessed.

Real-time network security monitoring, assessment and optimization

Network security analysis and optimization forms the core of the advanced application software in modern power system energy management systems. Recent progress in network security analysis and optimization is reviewed in this paper. Topics include state estimation, observability analysis, bad data processing, topology error detection, parameter error estimation, external network modelling, contingency selection, optimal power flow, corrective rescheduling and constrained economic dispatch. Issues concerning modelling, assumptions and limitations, solution methods, computational efficiency, solution accuracy and applications are addressed. Future trends in research are also discussed.

Security assessment of gas networks

AbstractA measure of the severity of a pipeline failure is the minimum reduction in load in the network necessary to ensure that no node falls below its minimum pressure. The expected loss of sales is calculated as the product of the minimum reduction in load and the expected duration of the period during which the pipeline will be in the inoperable state, and thus reflects both the severity and the frequency of the failure. Consequently, this index, whose evaluation involves network theory, optimization and probability theory, serves as a measure of the insecurity of the gas network.The security index can be evaluated for all points within a system, providing a basis of comparison between the relative vulnerability of different parts. The relative level of security of different design proposals can also be assessed using this index.