An Approach to Network Security Assessment based on Probalistic Relational Models
Fredrik Löf, Johan Stomberg, Teodor Sommestad, Mathias Ekstedt, Jonas Hallberg, Johan Bengtsson · 2010
Abstract—To assist rational decision making regarding network security improvements, decision makers need to be able to assess weaknesses in existing or potential new systems. This paper presents a model based assessment framework for analyzing the network security provided by different architectural scenarios. The framework uses a probabilistic relational model to express attack paths and related countermeasures. In this paper, it is demonstrated that this method can be used to support analysis based on architectural models. The approach allows calculating the probability that attacks will succeed given the instantiated architectural scenario. Moreover, the framework is scalable and can handle the uncertainties that accompany an analysis. The method has been applied in a case study of a military network.