01794nas a2200193   4500008004100000022001400041245005300055210005300108300001200161490000600173520127900179653001801458653001301476653002001489100001501509700001901524700002001543856003701563       2009                        eng d  a1939-012200aNetwork risk management using attacker profiling0 aNetwork risk management using attacker profiling  a83–960 v23 a<p>Risk management refers to the process of making decisions that minimize the effects of vulnerabilities on the network hosts. This can be a difficult task in the context of high-exploit probability and the difficult to identify new exploits and vulnerabilities. For many years, security engineers have performed risk analysis using economic models for the design and operation of risk-prone, technological systems using attack profiles. Based on the type of attacker identified, security administrators can formulate effective risk management policies for a network. We hypothesize that sequence of network actions by an attacker depends on the social behavior (e.g., skill level, tenacity, financial ability). We extended this and formulated a mechanism to estimate the risk level of critical resources that may be compromised based on attacker behavior. This estimation is accomplished using behavior based attack graphs representing all the possible attack paths to all the critical resources. The risk level is computed based on these graphs and are used as a measure of the vulnerability of the resource and forming an effective basis for a system administrator to perform suitable changes to network configuration. Copyright © 2008 John Wiley &amp; Sons, Ltd.</p>
10aattack graphs10abehavior10arisk management1 aDantu, Ram1 aKolan, Prakash1 aCangussu, João  uhttp://dx.doi.org/10.1002/sec.5802241nas a2200313   4500008004100000245008900041210006900130260003100199520128100230653002101511653001801532653001801550653002101568653001301589653002001602653002201622653002001644653002501664653004701689653002001736653001301756653002801769653002701797100001501824700001901839700001601858700001601874856003701890       2007                        eng d00aClassification of Attributes and Behavior in Risk Management Using Bayesian Networks0 aClassification of Attributes and Behavior in Risk Management Usi  aNew Brunswick, NJc05/20073 a<p>Security administration is an uphill task to implement in an enterprise network providing secured corporate services. With the slew of patches being released by network component vendors, system administrators require a barrage of tools for analyzing the risk due to vulnerabilities in those components. In addition, criticalities in patching some end hosts raises serious security issues about the network to which the end hosts are connected. In this context, it would be imperative to know the risk level of all critical resources keeping in view the everyday emerging new vulnerabilities. We hypothesize that sequence of network actions by attackers depends on their social and attack profile (behavioral resources such as skill level, time, and attitude). To estimate the types of attack behavior, we surveyed individuals for their ability and attack intent. Using the individuals' responses, we determined their behavioral resources and classified them as having opportunist, hacker, or explorer behavior. The profile behavioral resources can be used for determining risk by an attacker having that profile. Thus, suitable vulnerability analysis and risk management strategies can be formulated to efficiently curtail the risk from different types of attackers.</p>
10aattack behaviour10aattack graphs10aattack intent10aBayesian network10abehavior10abelief networks10aexplorer behavior10ahacker behavior10aopportunist behavior10aprofile behavioral resource classification10arisk management10aSecurity10asecurity administration10avulnerability analysis1 aDantu, Ram1 aKolan, Prakash1 aAkl, Robert1 aLoper, Kall  uhttps://nsl.cse.unt.edu/node/222