Abstract:Many security problems are caused by vulnerabilities hidden in enterprise computer networks. It is very important for system administrators to have knowledge about the security vulnerabilities. However, current vulnerability assessment methods may encounter the issues of high false positive rates, long computational time, and requirement of developing attack codes. Moreover, they are only capable of locating individual vulnerabilities on a single host without considering correlated effect of these vulnerabilities on a host or a section of network with the vulnerabilities possibly distributed among different hosts. To address these issues, an active vulnerability assessment system NetScope with C/S architecture is developed for evaluating computer network security based on open vulnerability assessment language instead of simulating attacks. The vulnerabilities and known attacks with their prerequisites and consequences are modeled based on predicate logic theory and are correlated so as to automatically construct potential attack paths with strong operation power of relational database management system. The testing results from a series of experiments show that this system has the advantages of a low false positive rate, short running periods, and little impact on the performance of audited systems and good scalability. The security vulnerabilities, undetectable if assessed individually in a network, are discovered without the need to simulate attacks. It is shown that the NetScope system is well suited for vulnerability assessment of large-scale computer networks such as campus networks and enterprise networks. Moreover, it can also be easily integrated with other security tools based on relational databases.

An Object-Oriented Method for Information System Security Evaluation

Research on Information Security Model and Security System Design

RESEARCH AND IMPLEMENTATION OF MODEL OF INFORMATION SECURITY EVALUATION

An Information System Security Evaluation Method Based on FCME Model

Power Information Systems Security: Modeling and Quantitative Evaluation

Study of Security Metrics of Software System for Comparative Evaluation

Introduction and Advancement of Information System Security Evaluation Criteria and Technology

Approach to Security Evaluation Based on Rough Set Theory for Host Computer

Business Activity-Oriented Security Model of Information Systems

Study on Evaluation for Security Situation of Networked Systems

Analysis and Comparison of Existing Security Design Methods for Power Information System

Technical Research on Computer Network Security Automatic Evaluation

A Hierarchical Framework of Security Situation Assessment for Information System

Study on information system risk assessment method

Exploring Computer Information Security Technology and Protection Methods

Design of Information System for Performance Assessment on Public Security of China Based on UML

A Business Process-based Method on Security Requirement Analysis of Information Systems

Computer Network System Security Assessment Method.

An OVAL-based Active Vulnerability Assessment System for Enterprise Computer Networks.

Study on Evaluation Method of Information System in Enterprise Based on CSF

Research on modeling method of power system network security risk assessment based on object-oriented Bayesian network