An Extended Stochastic Model for Quantitative Security Analysis of Networked Systems

Maochao Xu,Shouhuai Xu
DOI: https://doi.org/10.48550/arXiv.1603.08304
2016-03-28
Abstract:Quantitative security analysis of networked computer systems is one of the decades-long open problems in computer security. Recently, a promising approach was proposed in \cite{XuTDSC11}, which however made some strong assumptions including the exponential distribution of, and the independence between, the relevant random variables. In this paper, we substantially weaken these assumptions while offering, in addition to the same types of analytical results as in \cite{XuTDSC11}, methods for obtaining the desired security quantities in practice. Moreover, we investigate the problem from a higher-level abstraction, which also leads to both analytical results and practical methods for obtaining the desired security quantities. These would represent a significant step toward ultimately solving the problem of quantitative security analysis of networked computer systems.
Cryptography and Security
What problem does this paper attempt to address?