Scholarlink

<p>Network security remains a critical concern in today’s fast-paced tech world due to the dynamic challenges posed by high-speed networks. Despite using various security tools like firewalls and intrusion detection systems, managing multiple threats simultaneously is time-consuming. Existing vulnerability assessment tools struggle with complex attack scenarios, particularly those involving chained attacks relying on CVSS metrics. Thus, there’s a pressing need for a new strategy to strengthen network security against evolving threats. Attack graphs emerge as a powerful solution, especially for chained attacks, offering better ranking of attack paths and insights for system administrators. This study proposes a new approach, shifting focus from individual vulnerability severity to the overall severity of hosts or systems. The methodology determines system severity considering inherent vulnerabilities, along with exploit time and cost function. This shift allows a more comprehensive understanding of system security, addressing the complexities of chained attacks. The proposed methodology centres on three key elements: calculating average exploit time, modifying the CVSS v3.1 framework based on exploit time, and calculating a cost function for prioritizing attack paths. Results highlight the need to address 33% of existing vulnerabilities, focusing on 3 out of 9 hosts to enhance overall network security.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Unified Quantitative Evaluation of System Severity: Leveraging Time to Compromise and Cost-Benefit Analysis for Enhanced vulnerability Risk Assessment

  • 期刊论文

  • 发表日期：

    2025年9月12日

查看全文
  • Jyoti,
  • Urvashi Bansal,
  • Geeta Sikka,
  • Lalit Kumar Awasthi,
  • Harsh Kumar Verma

摘要

Network security remains a critical concern in today’s fast-paced tech world due to the dynamic challenges posed by high-speed networks. Despite using various security tools like firewalls and intrusion detection systems, managing multiple threats simultaneously is time-consuming. Existing vulnerability assessment tools struggle with complex attack scenarios, particularly those involving chained attacks relying on CVSS metrics. Thus, there’s a pressing need for a new strategy to strengthen network security against evolving threats. Attack graphs emerge as a powerful solution, especially for chained attacks, offering better ranking of attack paths and insights for system administrators. This study proposes a new approach, shifting focus from individual vulnerability severity to the overall severity of hosts or systems. The methodology determines system severity considering inherent vulnerabilities, along with exploit time and cost function. This shift allows a more comprehensive understanding of system security, addressing the complexities of chained attacks. The proposed methodology centres on three key elements: calculating average exploit time, modifying the CVSS v3.1 framework based on exploit time, and calculating a cost function for prioritizing attack paths. Results highlight the need to address 33% of existing vulnerabilities, focusing on 3 out of 9 hosts to enhance overall network security.