Differential Attack Graph-Based Approach for Assessing Change in the Network Attack Surface

摘要: Assessing change in an attack surface of dynamic computer networks is a formidable challenge. Researchers have previously looked into the problem measuring network risk and used graph (AG) for hardening. However, such AG-based approaches do not consider likely variations surface. Further, even though it possible to generate graphs realistic efficiently, resulting poses severe challenge human comprehension. To overcome problems, this paper, we present differential graph-based detection technique. We proposed distribution matrix-based technique discern differences Our method only detects degree but also finds root causes time-efficient manner. use synthetic illustrate approach perform set simulations evaluate performance. Experimental results show that our capable assessing changes surface, thus can be practice