Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs

Chen Cao
  • Fonction : Auteur
  • PersonId : 1040512
Lun-Pin Yuan
  • Fonction : Auteur
  • PersonId : 1040513
Anoop Singhal
  • Fonction : Auteur
  • PersonId : 1022671
Peng Liu
  • Fonction : Auteur
  • PersonId : 1026634
Xiaoyan Sun
  • Fonction : Auteur
  • PersonId : 1026633
Sencun Zhu
  • Fonction : Auteur
  • PersonId : 978056

Résumé

Cyber-defense and cyber-resilience techniques sometimes fail in defeating cyber-attacks. One of the primary causes is the ineffectiveness of business process impact assessment in the enterprise network. In this paper, we propose a new business process impact assessment method, which measures the impact of an attack towards a business-process-support enterprise network and produces a numerical score for this impact. The key idea is that all attacks are performed by exploiting vulnerabilities in the enterprise network. So the impact scores for business processes are the function result of the severity of the vulnerabilities and the relations between vulnerabilities and business processes. This paper conducts a case study systematically and the result shows the effectiveness of our method.
Fichier principal
Vignette du fichier
470961_1_En_21_Chapter.pdf (789.42 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01954421 , version 1 (13-12-2018)

Licence

Paternité

Identifiants

Citer

Chen Cao, Lun-Pin Yuan, Anoop Singhal, Peng Liu, Xiaoyan Sun, et al.. Assessing Attack Impact on Business Processes by Interconnecting Attack Graphs and Entity Dependency Graphs. 32th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2018, Bergamo, Italy. pp.330-348, ⟨10.1007/978-3-319-95729-6_21⟩. ⟨hal-01954421⟩
63 Consultations
135 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More