7th IEEE International Conference on Computer and Information Technology (CIT 2007) An Approach for Network Security Analysis Using Logic Exploitation Graph Aizu-Wakamatsu City, Fukushima, Japan October 16-October 19 ISBN: 0-7695-2983-6
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CIT.2007.129
Recent work in network security has focused on the fact that combinations of exploits are the typical means by which an attacker breaks into a network. Researchers have proposed a variety of graph-based analysis approach, and there is often a lack of logical formalism. This paper describes a new approach to represent and analyze network vulnerability. We propose logical exploitation graph, which directly illustrate logical dependencies among exploitation goals and network configure. Our logical exploitation graph generation tool builds upon LEG-NSA, a network security analyzer based on Prolog logical programming. We demonstrate how to reason all exploitation paths using bottom-up and top-down evaluation algorithms in the Prolog logic- programming engine. We show experimental evidence that our logical exploitation graph generation algorithm is very efficient.
Citation:
Han-dong Mao, Wei-Ming Zhang, "An Approach for Network Security Analysis Using Logic Exploitation Graph," cit, pp.761-766, 7th IEEE International Conference on Computer and Information Technology (CIT 2007), 2007 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||