A Generation Method of Network Security Hardening Strategy Based on Attack Graphs

Chao Zhao, Huiqiang Wang, Junyu Lin, Hongwu Lv and Yushu Zhang
Additional contact information
Chao Zhao: College of Computer Science and Technology, Harbin Engineering University, Harbin, China
Huiqiang Wang: College of Computer Science and Technology, Harbin Engineering University, Harbin, China
Junyu Lin: College of Computer Science and Technology, Harbin Engineering University, Harbin, China
Hongwu Lv: College of Computer Science and Technology, Harbin Engineering University, Harbin, China
Yushu Zhang: College of Computer Science and Technology, Harbin Engineering University, Harbin, China

International Journal of Web Services Research (IJWSR), 2015, vol. 12, issue 1, 45-61

Abstract: Analyzing attack graphs can provide network security hardening strategies for administrators. Concerning the problems of high time complexity and costly hardening strategies in previous methods, a method for generating low cost network security hardening strategies is proposed based on attack graphs. The authors' method assesses risks of attack paths according to path length and the common vulnerability scoring system, limits search scope with a threshold to reduce the time complexity, and lowers cost of hardening strategies by using a heuristic algorithm. The experimental results show that the authors' method has good scalability, and significantly reduces cost of network security hardening strategies with reasonable running time.

Date: 2015
References: Add references at CitEc
Citations:

Downloads: (external link)
https://services.igi-global.com/resolvedoi/resolve ... 018/IJWSR.2015010104 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jwsr00:v:12:y:2015:i:1:p:45-61

Access Statistics for this article

International Journal of Web Services Research (IJWSR) is currently edited by Liang-Jie Zhang

More articles in International Journal of Web Services Research (IJWSR) from IGI Global
Bibliographic data for series maintained by Journal Editor ().