Composable Tools For Network Discovery and Security Analysis

Security analysis should take advantage of a reliable knowledge base that contains semantically-rich information about a protected network. This knowledge is provided by network mapping tools. These tools rely on models to represent the entities of interest, and they leverage off network discovery techniques to populate the model structure with the data that is pertinent to a specific target network. Unfortunately, existing tools rely on incomplete data models. Networks are complex systems and most approaches oversimplify their target models in an effort to limit the problem space. In addition, the techniques used to populate the models are limited in scope and are difficult to extend. This paper presents NetMap, a security tool for network modeling, discovery, and analysis. NetMap relies on a comprehensive network model that is not limited to a specific network level; it integrates network information throughout the layers. The model contains information about topology, infrastruc...

• Type: Conference
• Year: 2002
• Where: ACSAC
• Authors: Giovanni Vigna, Fredrik Valeur, Jingyu Zhou, Richard A. Kemmerer
• Keywords: ACSAC 2002, Network Mapping Tools, Network Model, Security Privacy, Tools