A Model Checker Based Approach of Attack Path Enumeration for Network Security Management
Atig Bagchi, Sumana Ghosh · ASME Press eBooks · 2009
In a typical network, an attacker usually breaks into the network through a chain of exploits, resulting from its inherent vulnerabilities. Such a chain of exploits represents an attack path and for a network all such chains of exploits taken together form an attack graph. Attack graphs are tools which aid in the identification of risks associated with a network as a whole. The use of attack graphs in the context of multi-stage network security is an active research area. Various approaches have been reported in literature for generation of attack. In this paper, we present a novel approach to enumerate all the acyclic attack paths in a network using a custom algorithm over a model checker's solution.