Towards Unifying Vulnerability Information for Attack Graph Construction

  • Sebastian Roschke
  • Feng Cheng
  • Robert Schuppenies
  • Christoph Meinel
Conference paper

DOI: 10.1007/978-3-642-04474-8_18

Part of the Lecture Notes in Computer Science book series (LNCS, volume 5735)
Cite this paper as:
Roschke S., Cheng F., Schuppenies R., Meinel C. (2009) Towards Unifying Vulnerability Information for Attack Graph Construction. In: Samarati P., Yung M., Martinelli F., Ardagna C.A. (eds) Information Security. ISC 2009. Lecture Notes in Computer Science, vol 5735. Springer, Berlin, Heidelberg

Abstract

Attack graph is used as an effective method to model, analyze, and evaluate the security of complicated computer systems or networks. The attack graph workflow consists of three parts: information gathering, attack graph construction, and visualization. To construct an attack graph, runtime information on the target system or network environment should be monitored, gathered, and later evaluated with existing descriptions of known vulnerabilities. The output will be visualized into a graph structure for further measurements. Information gatherer, vulnerability repository, and the visualization module are three important components of an attack graph constructor. However, high quality attack graph construction relies on up-to-date vulnerability information. There are already some existing databases maintained by security companies, a community, or governments. Such databases can not be directly used for generating attack graph, due to missing unification of the provided information. This paper challenged the automatic extraction of meaningful information from various existing vulnerability databases. After comparing existing vulnerability databases, a new method is proposed for automatic extraction of vulnerability information from textual descriptions. Finally, a prototype was implemented to proof the applicability of the proposed method for attack graph construction.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Sebastian Roschke
    • 1
  • Feng Cheng
    • 1
  • Robert Schuppenies
    • 1
  • Christoph Meinel
    • 1
  1. 1.Hasso Plattner Institute (HPI)University of PotsdamPotsdamGermany

Personalised recommendations