Computer Security - ESORICS 2016 - 21st European Symposium on Research in Computer Security, Heraklion, Greece, September 26-30, 2016, Proceedings, Part II
Computer Security - ESORICS 2016 - 21st European Symposium on Research in Computer Security, Heraklion, Greece, September 26-30, 2016, Proceedings, Part II
复制标题
计算机安全 - ESORICS 2016 - 第 21 届欧洲计算机安全研究研讨会，希腊伊拉克利翁，2016 年 9 月 26-30 日，会议记录，第二部分
DOI：
10.1007/978-3-319-45741-3_10
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Khouzani M
中科院分区：
文献类型：
--
作者：
Khouzani M
考虑企业在网络安全方面的最优投资问题。最优性是根据总体(1)实施的货币成本、(2)网络安全控制的负面副作用（间接成本）和(3)网络安全风险的缓解来衡量的。我们考虑“被动”和“被动”威胁，前者代表攻击尝试独立于防御者计划的情况，后者，攻击者可以适应并对实施的网络安全防御做出反应。此外，我们以三种不同的方式建模多种网络安全控制的综合效果，这取决于它们的互补性和相关性的程度。我们还考虑了多阶段攻击和不同阶段成功的潜在相关性。首先，将该问题形式化为非线性多目标整数规划问题。然后，我们将它们转换为混合整数线性规划（MILP），即使在可用控制的数量很大的情况下，也能非常有效地求解精确的pareto最优解。在我们的案例研究中，我们考虑了27种最典型的安全控制，每一种都有多个实现强度级别，以及典型中小企业面临的37个常见漏洞。我们将我们的发现与专家推荐的关键控制进行比较。然后，我们研究了安全模型对最终最优计划的影响，并对比了不同安全度量的优点。特别是，我们展示了基于“反应性”威胁模型的安全措施的优越鲁棒性，以及迄今为止被忽视的相关性作用的重要性。
We consider the problem of optimal investment in cyber-security by an enterprise. Optimality is measured with respect to the overall (1) monetary cost of implementation, (2) negative side-effects of cyber-security controls (indirect costs), and (3) mitigation of the cyber-security risk. We consider “passive” and “reactive” threats, the former representing the case where attack attempts are independent of the defender’s plan, the latter, where attackers can adapt and react to an implemented cyber-security defense. Moreover, we model in three different ways the combined effect of multiple cyber-security controls, depending on their degree of complementarity and correlation. We also consider multi-stage attacks and the potential correlations in the success of different stages. First, we formalize the problem as a non-linear multi-objective integer programming. We then convert them into Mixed Integer Linear Programs (MILP) that very efficiently solve for the exact Pareto-optimal solutions even when the number of available controls is large. In our case study, we consider 27 of the most typical security controls, each with multiple intensity levels of implementation, and 37 common vulnerabilities facing a typical SME. We compare our findings against expert-recommended critical controls. We then investigate the effect of the security models on the resulting optimal plan and contrast the merits of different security metrics. In particular, we show the superior robustness of the security measures based on the “reactive” threat model, and the significance of the hitherto overlooked role of correlations.