Hierarchical Real-time Risk Assessment Based on Risk Propagation

摘要：

In this paper a hierarchical real-time risk assessment approach based on risk propagation is presented. The approach real-time calculates risks of services, hosts and network caused by attack processes. Risk index and risk status are used to quantify the risk situation. These two concepts are involved with three aspects of attacks: severity, certainty and successful possibility, and with the importance of the assets. Algorithms to calculate the risk index and risk status are proposed, and implement is briefly introduced. Risk status decay is also proposed, which is important to adaptive response.

关键词： security in digital systems real-time risk assessment risk propagation intrusion detection intrusion response

作者: Wan Li Shengfeng Tian

作者单位: Information Engineering Department,Beijing Information Technology College, Beijing, China School of Computer and Information Technology,Beijing Jiaotong University,Beijing, China

会议类型: 国际会议

会议名称: 2010 International Conference on Information Security and Artificial Intelligence(2010年信息安全与人工智能国际会议 ISAI 2010)

会议地点: 成都

会议语种:英文

页码: 1379-1383

在线出版日期: 2010-12-17（万方平台首次上网日期，不代表论文的发表时间）