2008 Third International Conference on Availability, Reliability and Security VEA-bility Security Metric: A Network Security Analysis Tool March 04-March 07 ISBN: 978-0-7695-3102-1
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ARES.2008.138
In this work, we propose a novel quantitative security metric, VEA-bility, which measures the desirability of different network configurations. An administrator can then use the VEA-bility scores of different configurations to configure a secure network. Based on our findings, we conclude that the VEA-bility can be used to accurately estimate the comparative desirability of a specific network configuration. This information can then be used to explore alternate possible configurations and allows an administrator to select one among the given options. These tools are important to network administrators as they strive to provide secure, yet functional, network configurations.
Index Terms:
network security, security metric, attack graphs, quantitative measure, exploit, Vulnerability, Exploitability, Attackability
Citation:
Melanie Tupper, A. Nur Zincir-Heywood, "VEA-bility Security Metric: A Network Security Analysis Tool," ares, pp.950-957, 2008 Third International Conference on Availability, Reliability and Security, 2008 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||