Network Hardening - An Automated Approach to Improving Network Security

This Springer Brief examines the tools based on attack graphs that help reveal network hardening threats. Existing tools detail all possible attack paths leading to critical network resources. Though no current tool provides a direct solution to remove the threats, they are a more efficient means of network defense than relying solely on the experience and skills of a human analyst. Key background information on attack graphs and network hardening helps readers understand the complexities of these tools and techniques. A common network hardening technique generates hardening solutions comprised of initially satisfied conditions, thereby making the solution more enforceable. Following a discussion of the complexity issues in this technique, the authors provide an improved technique that considers the dependencies between hardening options and employs a near-optimal approximation algorithm to scale linearly with the size of the inputs. Also included are automated solutions for hardening a network against sophisticated multi-step intrusions. Network Hardening: An Automated Approach to Improving Network Security is a valuable resource for researchers and professionals working in network security. It is also a useful tool for advanced-level students focused on security in computer science and electrical engineering.

List of contents

Introduction.- Related Work.- Attack Graph and Network Hardening.- Minimum-Cost Network Hardening.- Linear-Time Network Hardening.- Conclusion.

Product details

• Authors: Massimiliano Albanese, Sushil Jajodia, Lingyu Wang
• Publisher: Springer, Berlin
• Languages: English
• Product format: Paperback / Softback
• Released: 18.03.2014
• EAN: 9783319046112
• ISBN: 978-3-31-904611-2
• No. of pages: 60
• Dimensions: 167 mm x 251 mm x 6 mm
• Weight: 119 g
• Illustrations: VIII, 60 p. 23 illus.
• Series: SpringerBriefs in Computer Science
• Subjects: Natural sciences, medicine, IT, technology > IT, data processing > IT; C, computer science, Information Retrieval, Information Systems Applications (incl. Internet), Systems and Data Security, Data and Information Security, Computer and Information Systems Applications, Application software, Computer Communication Networks, Information Systems and Communication Service, Computers, Network Security, Computer security, Internet searching, Computer communication systems, Computer networking & communications, Network hardware