This report reviews past research papers that describe how to construct attack graphs, how
to use them to improve security of computer networks, and how to use them to analyze alerts …

Attack graphs are a valuable tool to network defenders, illustrating paths an attacker can use
to gain access to a targeted network. Defenders can then focus their efforts on patching the …

Penetration Testing is a methodology for assessing network security, by generating and
executing possible attacks. Doing so automatically allows for regular and systematic testing …

As the frequency of attacks faced by the average host connected to the Internet increases,
reliance on manual intervention for response is decreasingly tenable. Operating system and …

Attack graphs are models that offer significant capabilities to analyse security in network
systems. An attack graph allows the representation of vulnerabilities, exploits and conditions …

Attack graphs are models that offer significant capabilities to analyse security in network
systems because they can represent vulnerabilities, exploits and conditions for each attack …

Penetration Testing is a methodology for assessing network security, by generating and
executing possible attacks. Doing so automatically allows for regular and systematic testing …

Risk analysis has been used to manage the security of systems for several decades.
However, its use has been limited to offline risk computation and manual response. In …

Despite a significant increase in security of modern information systems, cyber attacks have
become more sophisticated as attackers combine multiple vulnerabilities to penetrate …

Attack tree analysis is used to estimate different parameters of general security threats
based on information available for atomic subthreats. We focus on estimating the expected …