A Proximity-Based Measure for Quantifying the Risk of Vulnerabilities

摘要: Identification and remediation of the system vulnerabilities that pose highest risk are crucial for maintaining security posture computer networks. In literature a large number metrics available vulnerability assessment. However, they fail to consider critical network conditions affect success an adversary. Consequently, evaluation based on current is misleading, hence, derived plan often results in ineffective application countermeasures. To overcome this problem, we have proposed comprehensive, integrated metric called Improved Relative Cumulative Risk (IRCR). For given vulnerability, IRCR takes into account CVSS Base Score, proximity from attacker’s initial position, neighboring vulnerabilities. The tested synthetic network, experimental show can be used effectively assessing each exploitable Based recommendations, administrator accurately determine top prioritize activities accordingly. validate efficacy applicability method, compared with state-of-the-art attack graph-based such as cumulative probability, resistance. Experimental demonstrate complementary measuring influential levels