Change search
ReferencesLink to record
Permanent link

Direct link
Impact estimation using data flows over attack graphs
Number of Authors: 1
2009 (English)Conference paper (Refereed)
Abstract [en]

We propose a novel approach to estimating the impact of an attack using a data model and an impact model on top of an attack graph. The data model describes how data flows between nodes in the network -- how it is copied and processed by softwares and hosts -- while the impact model models how exploitation of vulnerabilities affects the data flows with respect to the confidentiality, integrity and availability of the data. In addition, by assigning a loss value to a compromised data set, we can estimate the cost of a successful attack. We show that our algorithm not only subsumes the simple impact estimation used in the literature but also improves it by explicitly modeling loss value dependencies between network nodes. With our model, the operator will be able to use less time when comparing different security patches to a network.

Place, publisher, year, edition, pages
2009, 6. , 8 p.
Keyword [en]
Risk analysis, Network security, Attack graphs, Security metrics, Intrusion detection
National Category
Computer and Information Science
URN: urn:nbn:se:ri:diva-15976OAI: diva2:1038000
The 14th Nordic Conference on Secure IT Systems (NordSec 2009)
Available from: 2016-10-18 Created: 2016-10-18

Open Access in DiVA

fulltext(297 kB)4 downloads
File information
File name FULLTEXT01.pdfFile size 297 kBChecksum SHA-512
Type fulltextMimetype application/pdf

Other links


Search in DiVA

By author/editor
Olsson, Tomas
Computer and Information Science

Search outside of DiVA

GoogleGoogle Scholar
Total: 4 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

ReferencesLink to record
Permanent link

Direct link