摘要为了进行网络信息系统安全测评和主动防御, 提出了网络防御图模型,
攻防策略分类及其成本量化方法, 网络攻防博弈模型和基于上述模型的最优主动防御选取算法 …

Even well administered networks are vulnerable to attack. Recent work in network security
has focused on the fact that combinations of exploits are the typical means by which an …

We develop formal techniques that give users flexibility in examining design errors
discovered by automated analysis. We build our results using the model checking approach …

The typical means by which an attacker breaks into a network is through a chain of exploits,
where each exploit in the chain lays the groundwork for subsequent exploits. Such a chain is …

Model-based analysis of configuration vulnerabilities1 Page 1 Journal of Computer Security
10 (2002) 189–209 189 IOS Press Model-based analysis of configuration vulnerabilities1 CR …

In this article we develop a novel graph-based approach toward network forensics analysis.
Central to our approach is the evidence graph model that facilitates evidence presentation …

Software developers use a variety of formal and informal methods, including testing, to
argue that their systems are suitable for building high assurance applications. In this paper …

Critical infrastructure (CI) is vital for the overall economic growth and its reliable and safe
operation is essential for a nation's stability and people's safety. Proper operation of the …

Abstract Model-based anomaly detection systems restrict program execution by a
predefined model of allowed system call sequences. These systems are useful only if they …

A self-stabilizing distributed system is a fault-tolerant distributed system that tolerates any
kind and any finite number of transient faults, such as message loss and memory corruption …