Abstract:Traditional security analyses are often geared toward cryptographic primitives or protocols. Although such analyses are necessary, they cannot address a defender's need for insight into which aspects of a networked system having a significant impact on its security, and how to tune its configurations or parameters so as to improve security. This question is known to be notoriously difficult to answer, and the state of the art is that we know little about it. Toward ultimately addressing this question, this paper presents a stochastic model for quantifying security of networked systems. The resulting model captures two aspects of a networked system:1) the strength of deployed security mechanisms such as intrusion detection systems and 2) the underlying vulnerability graph, which reflects how attacks may proceed. The resulting model brings the following insights: 1) How should a defender “tune” system configurations (e.g., network topology) so as to improve security? 2) How should a defender “tune” system parameters (e.g., by upgrading which security mechanisms) so as to improve security? 3) Under what conditions is the steady-state number of compromised entities of interest below a given threshold with a high probability? Simulation studies are conducted to confirm the analytic results, and to show the tightness of the bounds of certain important metric that cannot be resolved analytically.

Performance Analytic Model for Authentication Mechanism

Performance Analysis Method for Access Authentication Mechanism

Researche on Design of Biometric Authentication System

Researches on Performance Evaluation of Biometric Authentication Systems

A PRIVACY-PRESERVING AUTHENTICATION SCHEME USING BIOMETRICS FOR PERVASIVE COMPUTING ENVIRONMENTS

A Performance Analysis Method for Intrusion Prevention System

Family-Gene Based Model For Network Authentication

Security Evaluation Techniques and Network Performance Simulation Based on Queue Model

Asynchronous Authentication

Online machine learning-based physical layer authentication for MmWave MIMO systems

A Stochastic Model for Quantitative Security Analyses of Networked Systems.

Performance modeling on dynamic authentication data management in heterogeneous interworking networks

An Enhanced Biometrics-Based User Authentication Scheme for Multi-Server Environments in Critical Systems

Quantifying pervasive authentication: the case of the Hancke-Kuhn protocol

Research of User Authentication Mechanismand Its Security Analysis

Modeling and performance evaluation of computer systems security operation

The Effect of Interception Techniques on Mouse Dynamics Based Authentication

An Enhanced Biometric-Based Three Factors User Authentication Scheme for Multi-Server Environments

Model checking of authentication protocols

Exact Data Ber Analysis Of Embedded Fingerprint Physical Layer Authentication Over Fading Channels

A logic of authentication