Abstract:Traditional security analyses are often geared toward cryptographic primitives or protocols. Although such analyses are necessary, they cannot address a defender's need for insight into which aspects of a networked system having a significant impact on its security, and how to tune its configurations or parameters so as to improve security. This question is known to be notoriously difficult to answer, and the state of the art is that we know little about it. Toward ultimately addressing this question, this paper presents a stochastic model for quantifying security of networked systems. The resulting model captures two aspects of a networked system:1) the strength of deployed security mechanisms such as intrusion detection systems and 2) the underlying vulnerability graph, which reflects how attacks may proceed. The resulting model brings the following insights: 1) How should a defender “tune” system configurations (e.g., network topology) so as to improve security? 2) How should a defender “tune” system parameters (e.g., by upgrading which security mechanisms) so as to improve security? 3) Under what conditions is the steady-state number of compromised entities of interest below a given threshold with a high probability? Simulation studies are conducted to confirm the analytic results, and to show the tightness of the bounds of certain important metric that cannot be resolved analytically.

A Queueing Analysis for the Denial of Service (dos) Attacks in Computer Networks

A Queue Model to Detect DDos Attacks

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

LQG Control under Denial-of-Service Attacks: an Experimental Study

Research and Simulation of Queue Management Algorithms in Ad Hoc Networks Under DDoS Attack

Vertical and Horizontal Queue Models for Oversaturated Signal Intersections with Quasi-Real-Time Reconstruction of Deterministic and Shockwave Queueing Profiles Using Limited Mobile Sensing Data

Queueing Analysis for Cognitive Radio Networks with Lower-Layer Considerations

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

On Denial of Service Attacks in Software Defined Networks

OPNET Based Simulation Modeling and Analysis of DoS Attack for Digital Substation

Towards Risk Evaluation of Denial-Of-Service Vulnerabilities in Security Protocols

Quantifying Network Denial of Service: A Location Service Case Study

Quantitative Characterization of Denial of Service: A Location Service Case Study

Optimal Denial-of-Service Attack Scheduling with Energy Constraint over Packet-Dropping Networks

Stochastic Modeling and Evaluation for Network Security

Performance Analysis Of Email Systems Under Three Types Of Attacks

Design and Analysis of a Stable Queue Control Scheme for the Internet

Stability and Stabilization of Semi-Markov Jump Linear System With DoS Attacks

A Novel Cookie-Based DDoS Protection Scheme and its Performance Analysis

A Stochastic Model for Quantitative Security Analyses of Networked Systems.