Automated generation and analysis of attack graphs

By Oleg Sheyner, Joshua W. Haines, Somesh Jha, Richard P. Lippmann, Jeannette M. Wing. Proceedings 2002 IEEE Symposium on Security and Privacy, 2002

1,458 citations recorded by the source corpus.

Subfields: Computational Theory and Mathematics, Computer Networks and Communications, Information Systems

View Paper: https://www.semanticscholar.org/paper/deacbc15ca11b222da69682aab939ef575e2142b

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computational Theory and Mathematics

In Computer Networks and Communications

In Information Systems

Citations in the corpus

Scalable, graph-based network vulnerability analysis (2002, background): “Paper [13] provides some support for our position on this: in a scaling exercise with 5 hosts, 8 exploits, and the vulnerabilities associated with those exploits, NuSMV reportedly took 2 hours to execute, with most of that time spent on graph manipulation.”
Two formal analyses of attack graphs (2002, methodology): “We have demonstrated in earlier work that model checking can be applied to automatically generate attack graphs [15].”
DAG-based attack and defense modeling: Don't miss the forest for the attack trees (2013, background): “Starting in 2002, Sheyner [238,239] made extensive contributions to popularize attack graphs by associating them with model checking techniques.”
A scalable approach to attack graph generation (2006, methodology): “Our attack graph generation tool builds upon MulVAL, a network security analyzer based on logical programming.”
From symptom to cause: localizing errors in counterexample traces (2003, background): “of counterexamples from a model checker as a graph [21].”
Handling a trillion (unfixable) flaws on a billion devices: Rethinking network security for the Internet-of-Things (2015, methodology): “To this end, we can borrow ideas from attack graph analysis in the security literature [30,36].”
How to misuse AODV: a case study of insider attacks against mobile ad-hoc routing protocols (2003, background): “With atomic misuses identiﬁed, these compound misuses can be derived automatically using vulnerability analysis tools [12–16].”
Model-based evaluation: from dependability to security (2004, background): “, [47], [12]), where the network state includes a description of hosts and their vulnerabilities and a description of connectivity.”
Efficient minimum-cost network hardening via exploit dependency graphs (2003, methodology): “In comparison to the original examples in [3] and [10], one may notice that some exploit preconditions are missing.”
Elaborating security requirements by construction of intentional anti-models (2004, methodology): “Sheyner et al use model checking technology to generate and analyze attack graphs [39].”
Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense (2019, methodology): “2) Graphical Security Model-Based MTD Evaluation: The graph-based security models (GSM) have been proposed and widely used in modeling and analysis of the network security using attack graphs (AGs) [150] and attack trees (ATs) [139].”
Game strategies in network security (2005, methodology): “[13] for automatically generating attack graphs to replicate our example, which we generated manually in this paper.”
NICE: Network Intrusion Detection and Countermeasure Selection in Virtual Network Systems (2013, methodology): “[9] proposed a technique based on a modified symbolic model checking NuSMV [10] and Binary Decision Diagrams (BDDs) to construct attack graph.”
Global Intrusion Detection in the DOMINO Overlay System (2004, background): “The inducement for the satellites is a global vantage point that allows for rapid outbreak recognition, dynamic content filtering and application specific source blacklisting to protect their networks in a timely manner.”
Dynamic Security Risk Management Using Bayesian Attack Graphs (2012, background): “A number of researchers have proposed risk assessment methods by building security models of network systems, using paradigms like attack graphs [1], [2], [3], [4], [5] and attack trees [6], [7], [8], [9], and then finding attack paths in these models to determine scenarios that could lead to damage”
An Attack Graph-Based Probabilistic Security Metric (2008, background): “On the other hand, the causal relationships between vulnerabilities are well understood and usually encoded in the form of attack graphs [1,24].”
Optimal Network Security Hardening Using Attack Graph Games (2015, background): “, 2006] and they are widely used in the network security to identify the minimal subset of vulnerabilities/sensors to be fixed/placed to prevent all known attacks [Sheyner et al., 2002; Noel and Jajodia, 2008], or to calculate security risk measures (e.”
Threat Modeling as a Basis for Security Requirements (2005, background): “Jeanette Wing et al. [9,10] stress the use of attack graphs in determining what security measures to deploy in a system.”