Nowadays, cyber security has become our prime concern because of the increasing number of internet-connected devices and the growing adoption of cloud-based services. In this paper, we have addressed the multi-stage attacks in which multiple hosts might get affected in multiple stages to pave way for attackers to compromise critical resources in a network. Attack graph is a widely used formalism to model multi-stage attacks where the security administrators can enumerate possible attack paths using multiple two-way relations between exploits and its pre and post-conditions. We have introduced the concept of attack hypergraph, which extends the traditional attack graph to capture more complex attack scenarios. We also discuss, some probable security analytics based on the attack hypergraph formalism.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Attack Hypergraph: A Framework for Modeling Multi-stage Attacks

  • Rudra Prasad Chatterjee,
  • Islaur Rahaman Ruku,
  • Mridul Sankar Barik,
  • Ayan Gain

摘要

Nowadays, cyber security has become our prime concern because of the increasing number of internet-connected devices and the growing adoption of cloud-based services. In this paper, we have addressed the multi-stage attacks in which multiple hosts might get affected in multiple stages to pave way for attackers to compromise critical resources in a network. Attack graph is a widely used formalism to model multi-stage attacks where the security administrators can enumerate possible attack paths using multiple two-way relations between exploits and its pre and post-conditions. We have introduced the concept of attack hypergraph, which extends the traditional attack graph to capture more complex attack scenarios. We also discuss, some probable security analytics based on the attack hypergraph formalism.