Towards Security Metrics Combining Risks of Known and Zero-day Attacks: Work in Progress

• Published in: IEEE/IFIP Network Operations and Management Symposium pp. 1 - 4
• Main Author: Marbukh, Vladimir
• Format: Conference Proceeding
• Language: English
• Published: IEEE 08.05.2023
• Subjects: Attack Graph; Bayes methods; Measurement; Moving Target Defense; robust risk metrics; Security; Security metrics; zero-day attack

This paper reports on work in progress on security metrics combining risks of known and zero-day attacks. We assume that system security is modelled by Attack Graph (AG), where attack paths may include a combination of known and zeroday exploits and impact of successful attacks is quantified by syst...