This paper presents the results of an experiment in security evaluation. The system is
modeled as a privilege graph that exhibits its security vulnerabilities. Quantitative measures …

This paper proposes a novel approach to help computing system administrators in
monitoring the security of their systems. This approach is based on modeling the system as …

This paper proposes a novel approach to help computing system administrators in
monitoring the security of their systems. The approach is based on modeling the system as a …

Security modeling centers on identifying system behavior, including any security defenses;
the system adversary's power; and the properties that constitute system security. Once a …

Mitigation of security risk is an important task in enterprise network security management.
However it is presently a skill acquired by individual experience, more an art than a science …

This paper presents a methodology for enumerating the vuinerabilities of a system, and
determining what countermeasures can best close those vulnerabilities. We first describe …

Model-based analysis of configuration vulnerabilities1 Page 1 Journal of Computer Security
10 (2002) 189–209 189 IOS Press Model-based analysis of configuration vulnerabilities1 CR …

We are living in an era when computer technology constantly changes our lives. While
placing unprecedented reliance on computers and digital systems, we continue to have a …

This paper discusses how information about the architecture and the vulnerabilities affecting
a distributed system can be used to quantitatively assess the risk to which the system is …

A security metric measures or assesses the extent to which a system meets its security
objectives. Since meaningful quantitative security metrics are largely unavailable, the …