Skip to search boxSkip to navigationSkip to main content

Methodologies to develop quantitative risk evaluation metrics

  • Thaier K.A. Hamid
    ,
  • Carsten Maple
    ,
  • Paul Sant
Research Output:
Contribution to journal
Article
 Peer-review

Open access

Abstract

The goal of this work is to advance a new methodology to measure a severity cost for each host using the Common Vulnerability Scoring System (CVSS) based on base, temporal and environmental metrics by combining related sub-scores to produce a unique severity cost by modeling the problem's parameters in to a mathematical framework. We build our own CVSS Calculator using our equations to simplify the calculations of the vulnerabilities scores and to benchmark with other models. We design and develop a new approach to represent the cost assigned to each host by dividing the scores of the vulnerabilities to two main levels of privileges, user and root, and we classify these levels into operational levels to identify and calculate the severity cost of multi steps vulnerabilities. Finally we implement our framework on a simple network, using Nessus scanner as tool to discover known vulnerabilities and to implement the results to build and represent our cost centric attack graph.

Publication Information

Output type

Research Output:
Contribution to journal
Article
 Peer-review

Original language

English

Pages from-to (Number of pages)

Pages 17-24

Journal (Volume, Issue Number)

International Journal of Computer Applications (Volume 48, Issue 14)

Publication milestones

  • Published - 01/01/2012

Publication status

Published - 01/01/2012

ISSN

0975-8887

Publication IDs

  • handle.net: 10547/279153

Access to documents

Publication metrics

Metrics

Download statistics
Download count
16