Remediating Logical Attack Paths Using Information System Simulated Topologies - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Remediating Logical Attack Paths Using Information System Simulated Topologies

Résumé

With the increase of attacks and Information Systems getting ever more complex, security operators need tools to help them protecting critical assets. An attack graph is a model to assess the level of security of an Information System, but it can be used to compute actions that mitigate the modeled threats. In this paper we present a method to remediate the most relevant attack paths extracted from a logical attack graph. In order to help an operator to choose between several remediation candidates, we rank them according to a cost of remediation combining operational and impact costs. We implement this method using MulVAL attack graphs and several publicly available sets of data.
Fichier principal
Vignette du fichier
remediation-of-attack-paths.pdf (412.2 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01144971 , version 1 (23-04-2015)

Identifiants

  • HAL Id : hal-01144971 , version 1

Citer

François-Xavier Aguessy, Lucie Gaspard, Olivier Bettan, Vania Conan. Remediating Logical Attack Paths Using Information System Simulated Topologies. C&ESAR 2014, Nov 2014, Rennes, France. pp.187. ⟨hal-01144971⟩
158 Consultations
262 Téléchargements

Partager

Gmail Facebook X LinkedIn More