文章基本信息

标题：Propose Vulnerability Metrics to Measure Network Secure using Attack Graph
本地全文：下载
作者：Zaid. J. Al-Araji ; Sharifah Sakinah Syed Ahmad ; Raihana Syahirah Abdullah 等
期刊名称：International Journal of Advanced Computer Science and Applications(IJACSA)
印刷版ISSN：2158-107X
电子版ISSN：2156-5570
出版年度：2021
卷号：12
期号：5
页码：51
DOI：10.14569/IJACSA.2021.0120508
出版社：Science and Information Society (SAI)
摘要：With the increase in using computer networking, the security risk has also increased. To protect the network from attacks, attack graph has been used to analyze the vulnerabilies of the network. However, properly securing networks requires quantifying the level of security offered by these actions, as you cannot enhance what you cannot measure. Security metrics provide a qualitative and quantitative representation of a system's or network's security level. However, using existing security metrics can lead to misleading results. This work proposed three metrics, which is the Number of Vulnerabilities (NV), Mean Vulnerabilities on Path (MVoP), and the Weakest Path (WP). The experiment of this work used two networks to test the metrics. The results show the effect of these metrics on finding the weaknesses of the network that the attacker may use.
关键词：Attack graph; security metrics; attack path; path analysis; attack graph uses