Automated Generation and Analysis of Attack Graphs.¶
Sheyner, O., Haines, J., Jha, S., Lippmann, R., & Wing, J. M. (2002). Automated Generation and Analysis of Attack Graphs. Proceedings of the 2002 IEEE Symposium on Security and Privacy, 273-284.
Cited by¶
2 citations across 2 artifacts.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Vulnerability Hotspot
- In cybersecurity, machines that combine outdated software, broad access privileges, and external reachability become priority compromise targets.
This sourceAttack graphs trace the paths where reachability, privilege, and exploitable software combine, identifying hosts at the intersection of these layers as priority compromise targets.
- In cybersecurity, machines that combine outdated software, broad access privileges, and external reachability become priority compromise targets.
Mechanisms¶
- Attack Graph Analysis
- The discipline is to red-team for moves outside the model, keep the technique catalog current, and read "no path" as "no path we modeled."
This sourceConstructs attack graphs over an explicit abstract network model, transition relation, and modeled arsenal of atomic attacks.
- The discipline is to red-team for moves outside the model, keep the technique catalog current, and read "no path" as "no path we modeled."
Verification¶
Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.
Does it back the claim? Not recorded. Neither this nor any other of the 2 citations of this work carries a recorded support check.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:0b1dee5a057a · see in the full table