Even well administered networks are vulnerable to attack. Recent work in network security
has focused on the fact that combinations of exploits are the typical means by which an …

Attack graph analysis has been established as a powerful tool for analyzing network
vulnerability. However, previous approaches to network hardening look for exact solutions …

Attack graphs are important tools for analyzing security vulnerabilities in enterprise
networks. Previous work on attack graphs has not provided an account of the scalability of …

The typical means by which an attacker breaks into a network is through a chain of exploits,
where each exploit in the chain lays the groundwork for subsequent exploits. Such a chain is …

In measuring the overall security of a network, a crucial issue is to correctly compose the
measure of individual components. Incorrect compositions may lead to misleading results …

Quantifying security risk is an important and yet difficult task in enterprise network security
management. While metrics exist for individual software vulnerabilities, there is currently no …

We describe a suite of metrics for measuring network-wide cyber security risk based on a
model of multi-step attack vulnerability (attack graphs). Our metrics are grouped into families …

Attack graphs depict ways in which an adversary exploits system vulnerabilities to achieve a
desired state. System administrators use attack graphs to determine how vulnerable their …

This report presents a graph-based approach to network vulnerability analysis. The method
is flexible, allowing analysis of attacks from both outside and inside the network. It can …

Attack graphs show possible paths that an attacker can use to intrude into a target network
and gain privileges through series of vulnerability exploits. The computation of attack graphs …