Optimal Network Security Strengthening Using Attack-Defense Game Model

For assessing the security and optimal strengthening of large enterprise networks, this paper proposes a new approach uses configuration information on firewalls and vulnerability information on all network devices to build defense graphs that show the attack and defense strategy. Some models includ...

Full description

Saved in:
Bibliographic Details
Published in2009 Sixth International Conference on Information Technology: New Generations pp. 475 - 480
Main Authors Wei Jiang, Bin-xing Fang, Hong-li Zhang, Zhi-hong Tian, Xin-fang Song
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.04.2009
Subjects
Atomic measurements
Attack-Defense Game
Communication system security
Computer networks
Computer security
Cost function
Cost metrics
Defense Graph
Game theory
Information security
Internet Security
Protection
Security Strengthening
Taxonomy
Tree graphs
Online AccessGet full text

Cover

More Information
Summary:For assessing the security and optimal strengthening of large enterprise networks, this paper proposes a new approach uses configuration information on firewalls and vulnerability information on all network devices to build defense graphs that show the attack and defense strategy. Some models including a defense graph model, attack-defense taxonomy and cost quantitative model, and Attack-Defense Game (ADG) model. We regard the interactions between an attacker and the defender as a two-player, non-cooperative, zero-sum, finite strategic game and formulate the ADG model for the game. An algorithm for optimal strengthening strategy selection based on those models is proposed. Optimal strengthening strategies with minimizing costs are used to defend the attack and strengthening the network in advance. And finally, we perform empirical experiments to verify the effectiveness of the model experiment results indicate that our models and methods are effective and efficient.
ISBN:1424437709
9781424437702
DOI:10.1109/ITNG.2009.300