CT-ISG: Compound Exposure Analysis: Security Metrics and Applications

这个网络信任项目研究使用复合暴露图，网络和对手模型作为基础，一个全面的信息安全风险管理架构，跨越这些领域。了解企业网络威胁的性质和严重性对于有效预防和响应至关重要。网络管理员和安全专业人员必须有工具来衡量风险和制定补救计划，并制定成熟的风险管理流程。该项目通过开发可扩展分析和复合风险的技术，设计和验证安全风险指标，以及构建一个软件引擎，将分析工具和指标结合在一个便利的风险评估过程中，来解决这些国家关注的领域。 这个项目的智力价值在于项目团队的力量和所解决问题的重要性。 PI和其他参与者都有重要的专业知识，可以为项目提供帮助，这是一个高风险和困难的项目，但也有很高的回报潜力。该项目有可能在掌握复杂系统的脆弱性方面提供技术进步，并提供防御机制。 该项目更广泛的影响在于教育和推广活动，这些活动在学术，工业和政府合作伙伴之间建立关系，以部署和评估所开发的技术。该项目通过既定的指导方案积极吸收本科生和代表性不足的群体成员参与。研究工具和结果被战略性地整合到信息保障课程和课程中，以提供信息安全风险管理教育和培训的当前和有效模式。

This Cyber Trust project investigates the use of compound exposure graphs, and network and adversary models as the foundation a comprehensive information security risk management architecture that spans these domains. Understanding the nature and severity of threats to enterprise networks is critical for effective prevention and response. Network administrators and security professionals must have tools to measure risk and devise remediation plans and to develop a mature risk management process. The project addresses these areas of national concern by developing techniques for scalable analysis and compound exposures, designing and validating security risk metrics, and constructing a software engine that binds analytical tools and metrics in a facilitated risk assessment process. The intellectual merit of this project lies in both the strength of the project team and the significance of the problem addressed. The PI and others involved all have significant expertise to offer to the project, which is high risk and difficult but also has high potential for return. The project has the potential to provide technological advances in grasping the vulnerability of complex systems and provide defense mechanisms. The broader impacts of the project lie in education and outreach activities that build relationships between academic, industrial, and government partners to deploy and evaluate the technologies that are developed. The project actively incorporates participation of undergraduate students and members of underrepresented groups via established mentoring programs. Research tools and results are strategically integrated into the information assurance courses and curriculum to provide current and effective models of information security risk management education and training.