A Novel Quantitative Approach For Measuring Network Security

—Evaluation of network security is an essential step in securing any network. This evaluation can help security professionals in making optimal decisions about how to design security countermeasures, to choose between alternative security architectures, and to systematically modify security configurations in order to improve security. However, the security of a network depends on a number of dynamically changing factors such as emergence of new vulnerabilities and threats, policy structure and network traffic. Identifying, quantifying and validating these factors using security metrics is a major challenge in this area. In this paper, we propose a novel security metric framework that identifies and quantifies objectively the most significant security risk factors, which include existing vulnerabilities, historical trend of vulnerability of the remotely accessible services, prediction of potential vulnerabilities for any general network service and their estimated severity and �...

• Type: Conference
• Year: 2008
• Where: INFOCOM
• Authors: Mohammad Salim Ahmed, Ehab Al-Shaer, Latifur Khan
• Keywords: Communications, INFOCOM 2008, Network Security, Security, Security Metric