Abstract:Many security problems are caused by vulnerabilities hidden in enterprise computer networks. It is very important for system administrators to have knowledge about the security vulnerabilities. However, current vulnerability assessment methods may encounter the issues of high false positive rates, long computational time, and requirement of developing attack codes. Moreover, they are only capable of locating individual vulnerabilities on a single host without considering correlated effect of these vulnerabilities on a host or a section of network with the vulnerabilities possibly distributed among different hosts. To address these issues, an active vulnerability assessment system NetScope with C/S architecture is developed for evaluating computer network security based on open vulnerability assessment language instead of simulating attacks. The vulnerabilities and known attacks with their prerequisites and consequences are modeled based on predicate logic theory and are correlated so as to automatically construct potential attack paths with strong operation power of relational database management system. The testing results from a series of experiments show that this system has the advantages of a low false positive rate, short running periods, and little impact on the performance of audited systems and good scalability. The security vulnerabilities, undetectable if assessed individually in a network, are discovered without the need to simulate attacks. It is shown that the NetScope system is well suited for vulnerability assessment of large-scale computer networks such as campus networks and enterprise networks. Moreover, it can also be easily integrated with other security tools based on relational databases.

Novel Dynamic Security Analysis Model for Computing System Based on DBN

Proactive Security Defense of Dynamic Network

Process Stability Modeling and Attack Protection of Industrial Control System Based on Reverse Cloud Algorithm Model

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Risk Assessment in Power System Based on Parallel Computation

Modelization and analysis of dynamic heterogeneous redundant system

Dynamic Network Security Analysis Based on Bayesian Attack Graphs

Security Analysis of Dynamic SDN Architectures Based on Game Theory

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Network Attack and Defense Modeling and System Security Analysis: A Novel Approach Using Stochastic Evolutionary Game Petri Net

A Two-Dimension Security Assessing Model for CMDs Combined with Generalized Stochastic Petri Net

A Novel Network Survivability Analysis and Evaluation Model

Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

A New Method of Network Risk Assessment Based on Bayesian Model

A Stochastic Model of Active Cyber Defense Dynamics

Novel Dynamic Trusted Evaluation Model of Software Behavior

A Stochastic Model for Quantitative Security Analyses of Networked Systems.

Computer Network Security Analysis Modeling Based on Deep Learning Algorithm

An Adjacency Matrixes-Based Model for Network Security Analysis

An OVAL-based Active Vulnerability Assessment System for Enterprise Computer Networks.