Arşiv ve Dokümantasyon Merkezi
Dijital Arşivi

Cost-aware network hardening using compact attack graphs

Basit öğe kaydını göster

dc.contributor Graduate Program in Computer Engineering.
dc.contributor.advisor Alagöz, Fatih.
dc.contributor.author Yiğit, Beytüllah.
dc.date.accessioned 2023-03-16T10:02:00Z
dc.date.available 2023-03-16T10:02:00Z
dc.date.issued 2014.
dc.identifier.other CMPE 2014 Y54
dc.identifier.uri http://digitalarchive.boun.edu.tr/handle/123456789/12284
dc.description.abstract Attack graphs provide analytical support to prevent multistep network attacks by showing all possible sequences of vulnerabilities and their interactions. Since at- tack graphs generally consist of a very large number of nodes, it is computationally challenging to analyze them for hardening a network against attacks. In this thesis, we propose a greedy heuristic method to nd a cost-effective solution to protect a net- work using compact attack graphs. First, we extract all possible attack paths which reach predetermined critical resources embedded in the network. The exploit or initial condition which contributes the most to attack paths with least cost is selected to be removed. This process continues iteratively and a security analyst can stop it when the total cost exceeds the allocated budget. The experimental results show that our algorithm scales almost linearly with the size of the networks and it can be applied to large-scale graphs with a very large number of nodes. They also show that the algo- rithm nds nearly minimum cost solution compared to optimal solution. In addition to providing a network-hardening solution, our proposal measures the security level of the network in every step to demonstrate how vulnerable the network is against threats. This accompanying feature is bene cial for network security assessment and situation awareness.
dc.format.extent 30 cm.
dc.publisher Thesis (M.S.) - Bogazici University. Institute for Graduate Studies in Science and Engineering, 2014.
dc.subject.lcsh Data mining -- Data processing.
dc.title Cost-aware network hardening using compact attack graphs
dc.format.pages xii, 46 leaves ;


Bu öğenin dosyaları

Bu öğe aşağıdaki koleksiyon(lar)da görünmektedir.

Basit öğe kaydını göster

Dijital Arşivde Ara


Göz at

Hesabım