Abstract:Traditional security analyses are often geared toward cryptographic primitives or protocols. Although such analyses are necessary, they cannot address a defender's need for insight into which aspects of a networked system having a significant impact on its security, and how to tune its configurations or parameters so as to improve security. This question is known to be notoriously difficult to answer, and the state of the art is that we know little about it. Toward ultimately addressing this question, this paper presents a stochastic model for quantifying security of networked systems. The resulting model captures two aspects of a networked system:1) the strength of deployed security mechanisms such as intrusion detection systems and 2) the underlying vulnerability graph, which reflects how attacks may proceed. The resulting model brings the following insights: 1) How should a defender “tune” system configurations (e.g., network topology) so as to improve security? 2) How should a defender “tune” system parameters (e.g., by upgrading which security mechanisms) so as to improve security? 3) Under what conditions is the steady-state number of compromised entities of interest below a given threshold with a high probability? Simulation studies are conducted to confirm the analytic results, and to show the tightness of the bounds of certain important metric that cannot be resolved analytically.

Power Information Systems Security: Modeling and Quantitative Evaluation

A Quantitative Security Architecture Design Method for Power Information System

A Framework of Quantitative Analysis for Information System Survivability

Research on Information Security Model and Security System Design

Survivability Analysis For Information Systems

A framework for quantifying information system survivability

Analysis and Comparison of Existing Security Design Methods for Power Information System

Towards Quantifying the (in)security of Networked Systems.

A Security Situation Assessment Method Based on Support Vector Regression for Power Monitoring System.

An Object-Oriented Method for Information System Security Evaluation

Quantitative Vulnerability Assessment for Power Information System Based on Adj acency Matrix

Power System Cyber-physical Modelling and Security Assessment：Motivation and Ideas

Study of Security Metrics of Software System for Comparative Evaluation

Quantitative Security Evaluation Model for Security Management

A Stochastic Model for Quantitative Security Analyses of Networked Systems.

Safety Index, Evaluation Model, and Comprehensive Evaluation Method of Power Information System under Classified Protection 2.0

Quantitative Method for Security Situation of the Power Information Network Based on the Evolutionary Neural Network

Study on Evaluation for Security Situation of Networked Systems

Multiple behavior information fusion based quantitative threat evaluation

Quantitative Hierarchical Threat Evaluation Model for Network Security

RESEARCH AND IMPLEMENTATION OF MODEL OF INFORMATION SECURITY EVALUATION