Designing Scalable and Effective Decision Support for Mitigating Attacks in Large Enterprise Networks

Zhiyun Qian; Z. Mao; Ammar Rayes; David Jaffe

Security and Privacy in Communication Networks. 7th International ICST Conference, SecureComm 2011, London, UK, September 7-9, 2011, Revised Selected Papers

Research Article

Designing Scalable and Effective Decision Support for Mitigating Attacks in Large Enterprise Networks

Download

348 downloads

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.1007/978-3-642-31909-9_1,
    author={Zhiyun Qian and Z. Mao and Ammar Rayes and David Jaffe},
    title={Designing Scalable and Effective Decision Support for Mitigating Attacks in Large Enterprise Networks},
    proceedings={Security and Privacy in Communication Networks. 7th International ICST Conference, SecureComm 2011, London, UK, September 7-9, 2011, Revised Selected Papers},
    proceedings_a={SECURECOMM},
    year={2012},
    month={10},
    keywords={vulnerability management optimization integer programming},
    doi={10.1007/978-3-642-31909-9_1}
}

Zhiyun Qian
Z. Mao
Ammar Rayes
David Jaffe
Year: 2012
Designing Scalable and Effective Decision Support for Mitigating Attacks in Large Enterprise Networks
SECURECOMM
Springer
DOI: 10.1007/978-3-642-31909-9_1

Zhiyun Qian¹^,*, Z. Mao¹^,*, Ammar Rayes²^,*, David Jaffe²^,*

1: University of Michigan
2: Cisco Systems, Inc.

*Contact email: zhiyunq@umich.edu, zmao@umich.edu, rayes@cisco.com, djaffe@cisco.com

Abstract

Managing numerous security vulnerabilities has long been a difficult and daunting task especially due to the complexity, heterogeneity, and various operational constraints of the network. In this paper, we focus on the task of mitigating and managing network-device-specific vulnerabilities automatically and intelligently. We achieve the goal by a scalable, interactive, topology-aware framework that can provide mitigation actions at selectively chosen devices. The intuition behind our work is that more and more network devices are becoming security-capable so that they can be collectively used to achieve security goals while satisfying certain network policies.

Keywords: vulnerability management optimization integer programming

Published: 2012-10-08

: http://dx.doi.org/10.1007/978-3-642-31909-9_1