@article{Frigault2008,
abstract = {Given the increasing dependence of our societies on information systems, the overall security of these systems should be measured and improved. Existing work generally focuses on measuring individual vulnerabilities instead of measuring their combined effects. Recent research has explored the application of attack graphs and probabilistic security metrics to address this challenge. However, such work usually assumes metrics of individual vulnerabilities to be independently distributed and combines them in an arbitrary manner. They cannot address more realistic cases, such as exploiting one vulnerability makes another vulnerability easier to exploit. In this paper, we propose to model probability metrics based on attack graphs as a special Bayesian Network. This approach provides a sound theoretical foundation to such metrics. It can also provide the capabilities of using conditional probabilities to address the general cases of interdependency between vulnerabilities.},
author = {Frigault, Marcel and Wang, Lingyu},
doi = {10.1109/COMPSAC.2008.88},
isbn = {978-0-7695-3262-2},
issn = {0730-3157},
journal = {2008 32nd Annual IEEE International Computer Software and Applications Conference},
keywords = {Bayesian Network-based Security Analysis},
pages = {698--703},
publisher = {Ieee},
shorttitle = {Computer Software and Applications, 2008. COMPSAC },
title = {{Measuring Network Security Using Bayesian Network-Based Attack Graphs}},
url = {http://ieeexplore.ieee.org/lpdocs/epic03/wrapper.htm?arnumber=4591650},
year = {2008}
}

{"_id":{"_str":"535ed25a97e559e82100045b"},"__v":1,"authorIDs":[],"author_short":["Frigault, M.","Wang, L."],"bibbaseid":"frigault-wang-measuringnetworksecurityusingbayesiannetworkbasedattackgraphs-2008","bibdata":{"bibtype":"article","type":"article","abstract":"Given the increasing dependence of our societies on information systems, the overall security of these systems should be measured and improved. Existing work generally focuses on measuring individual vulnerabilities instead of measuring their combined effects. Recent research has explored the application of attack graphs and probabilistic security metrics to address this challenge. However, such work usually assumes metrics of individual vulnerabilities to be independently distributed and combines them in an arbitrary manner. They cannot address more realistic cases, such as exploiting one vulnerability makes another vulnerability easier to exploit. In this paper, we propose to model probability metrics based on attack graphs as a special Bayesian Network. This approach provides a sound theoretical foundation to such metrics. It can also provide the capabilities of using conditional probabilities to address the general cases of interdependency between vulnerabilities.","author":[{"propositions":[],"lastnames":["Frigault"],"firstnames":["Marcel"],"suffixes":[]},{"propositions":[],"lastnames":["Wang"],"firstnames":["Lingyu"],"suffixes":[]}],"doi":"10.1109/COMPSAC.2008.88","isbn":"978-0-7695-3262-2","issn":"0730-3157","journal":"2008 32nd Annual IEEE International Computer Software and Applications Conference","keywords":"Bayesian Network-based Security Analysis","pages":"698--703","publisher":"Ieee","shorttitle":"Computer Software and Applications, 2008. COMPSAC ","title":"Measuring Network Security Using Bayesian Network-Based Attack Graphs","url":"http://ieeexplore.ieee.org/lpdocs/epic03/wrapper.htm?arnumber=4591650","year":"2008","bibtex":"@article{Frigault2008,\nabstract = {Given the increasing dependence of our societies on information systems, the overall security of these systems should be measured and improved. Existing work generally focuses on measuring individual vulnerabilities instead of measuring their combined effects. Recent research has explored the application of attack graphs and probabilistic security metrics to address this challenge. However, such work usually assumes metrics of individual vulnerabilities to be independently distributed and combines them in an arbitrary manner. They cannot address more realistic cases, such as exploiting one vulnerability makes another vulnerability easier to exploit. In this paper, we propose to model probability metrics based on attack graphs as a special Bayesian Network. This approach provides a sound theoretical foundation to such metrics. It can also provide the capabilities of using conditional probabilities to address the general cases of interdependency between vulnerabilities.},\nauthor = {Frigault, Marcel and Wang, Lingyu},\ndoi = {10.1109/COMPSAC.2008.88},\nisbn = {978-0-7695-3262-2},\nissn = {0730-3157},\njournal = {2008 32nd Annual IEEE International Computer Software and Applications Conference},\nkeywords = {Bayesian Network-based Security Analysis},\npages = {698--703},\npublisher = {Ieee},\nshorttitle = {Computer Software and Applications, 2008. COMPSAC },\ntitle = {{Measuring Network Security Using Bayesian Network-Based Attack Graphs}},\nurl = {http://ieeexplore.ieee.org/lpdocs/epic03/wrapper.htm?arnumber=4591650},\nyear = {2008}\n}\n","author_short":["Frigault, M.","Wang, L."],"key":"Frigault2008","id":"Frigault2008","bibbaseid":"frigault-wang-measuringnetworksecurityusingbayesiannetworkbasedattackgraphs-2008","role":"author","urls":{"Paper":"http://ieeexplore.ieee.org/lpdocs/epic03/wrapper.htm?arnumber=4591650"},"keyword":["Bayesian Network-based Security Analysis"],"downloads":0},"bibtype":"article","biburl":"https://dl.dropboxusercontent.com/u/14215034/bibs/bibs/A-List-bb.bib","downloads":0,"keywords":["bayesian network-based security analysis"],"search_terms":["measuring","network","security","using","bayesian","network","based","attack","graphs","frigault","wang"],"title":"Measuring Network Security Using Bayesian Network-Based Attack Graphs","year":2008,"dataSources":["jGrSs2aYARmRcupKy"]}