Classification of Attributes and Behavior in Risk Management Using Bayesian Networks

Description:

This paper discusses issues in security.

Creator(s):
Creation Date: March 2007
Partner(s):
UNT College of Engineering
Collection(s):
UNT Scholarly Works
Usage:
Total Uses: 113
Past 30 days: 13
Yesterday: 0
Creator (Author):
Dantu, Ram

University of North Texas

Creator (Author):
Kolan, Prakash

University of North Texas

Creator (Author):
Loper, Kall

University of North Texas

Creator (Author):
Akl, Robert G.

University of North Texas

Date(s):
  • Creation: March 2007
Description:

This paper discusses issues in security.

Degree:
Note:

Abstract: Security administration is an uphill task to implement in an enterprise network providing secured corporate services. With the slew of patches being released by network component vendors, system administrators require a barrage of tools for analyzing the risk due to vulnerabilities in those components. In addition, criticalities in patching some end hosts raises serious security issues about the network to which the end hosts are connected. In this context, it would be imperative to know the risk level of all critical resources keeping in view the everyday emerging new vulnerabilities. The authors hypothesize that sequence of network actions by attackers depends on their social and attack profile (behavioral resources such as skill level, time, and attitude). To estimate the types of attack behavior, the athors surveyed individuals for their ability and attack intent. Using the individuals' responses, the authors determined their behavioral resources and classified them as having opportunist, hacker, or explorer behavior. The profile behavioral resources can be used for determining risk by an attacker having that profile. Thus, suitable vulnerability analysis and risk management strategies can be formulated to efficiently curtail the risk from different types of attackers.

Physical Description:

4 p.

Language(s):
Subject(s):
Keyword(s): attack graphs | behaviors | risk management | belief networks | security
Source: Institute of Electrical and Electronics Engineers International Conference on Portable Information Devices, 2007, Orlando, Florida, United States
Contributor(s):
Partner:
UNT College of Engineering
Collection:
UNT Scholarly Works
Identifier:
  • ARK: ark:/67531/metadc30836
Resource Type: Paper
Format: Text
Rights:
Access: Public