Optimal Security Hardening over a Probabilistic Attack Graph
Optimal Security Hardening over a Probabilistic Attack Graph
复制标题
概率攻击图上的最佳安全强化
DOI：
10.1145/3510547.3517919
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Buczkowski P
中科院分区：
文献类型：
--
作者：
Buczkowski P
CySecTool是一个工具，可以在给定的预算中为概率攻击图找到成本最优的安全控制组合。投资组合是针对计算机系统采用的漏洞的一组对策或控制措施，而攻击图是一种威胁场景模型。在攻击图中，节点是攻击者的特权状态，边是提升特权的漏洞，而控制降低了某些漏洞被利用的概率。该工具建立在[1]发布的优化算法之上，使用户能够快速创建、编辑和逐步改进模型，分析给定投资组合的结果，并显示帕累托边界中所有可能的最佳解决方案。利用系统图和工业安全工程师根据他们工作的工业源准备的可疑攻击路径进行了案例研究。该案例研究的目标是对监控和数据采集（SCADA）工业系统进行建模，由于该系统有可能对人造成伤害，因此需要强大的保护，同时不允许使用典型的渗透工具，如漏洞扫描器。分析结果，以显示网络安全分析师将如何使用CySecTool存储网络安全情报，并得出进一步的结论。
CySecTool is a tool that finds a cost-optimal security controls portfolio in a given budget for a probabilistic attack graph. A portfolio is a set of counter-measures, or controls, against vulnerabilities adopted for a computer system, while an attack graph is a type of a threat scenario model. In an attack graph, nodes are privilege states of the attacker, edges are vulnerabilities escalating privileges, and controls reduce the probabilities of some vulnerabilities being exploited. The tool builds on an optimisation algorithm published by [1], enabling a user to quickly create, edit, and incrementally improve models, analyse results for given portfolios and display the bestsolutionsforallpossiblebudgetsintheformofaParetofrontier. A case study was performed utilising a system graph and suspected attack paths prepared by industrial security engineers based on an industrial source with which they work. The goal of the case study is to model a supervisory control and data acquisition (SCADA) industrial system which, due to having a potential to harm people, necessitates strong protection while not allowing to use typical penetration tools like vulnerability scanners. Results are analysed to show how a cyber-security analyst would use CySecTool to store cyber-security intelligence and draw further conclusions.