Using CVSS in Attack Graphs
Authors:
- Laurent GallonLGLaurent Gallon
- Jean Jacques BascouJBJean Jacques Bascou
- 1 August 2011
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 59-66
Abstract
Derived from attack models, attack graphs are providing an efficient way to model attack scenarios intended against computer networks. Such graphs are using CVE database in which all known vulnerabilities are gathered. The CVSS framework is aiming to give numeric scores to each vulnerability recorded in the CVE database, which represent its characteristics and quantify its security impacts. In this paper we adapt attack graphs definition in order to be able to use them in conjunction with CVSS framework. The aim of our work is to provide a way to give an assessment of the impact of attacks on the hosts of the target network. This assessment is made using a host damage score and a network damage score, which take into account the characteristics and consequences of each atomic attack constituting an attack scenario.Keywords
This publication has 5 references indexed in Scilit:
- On the Impact of Environmental Metrics on CVSS Scores2010
- A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilitiesRequirements Engineering, 2009
- An analysis of CVSS version 2 vulnerability scoring2009
- Automated generation and analysis of attack graphs2005
- Two formal analyses of attack graphs2003