Scalable and adaptable security modelling and analysis.

Modern networked systems are complex in such a way that assessing the security of them is a difficult task. Security models are widely used to analyse the security of these systems, which are capable of evaluating the complex relationship between network components. Security models can be generated by identifying vulnerabilities, threats (e.g., cyber attacks), network configurations, and reachability of network components. These network components are then combined into a single model to evaluate how an attacker may penetrate through the networked system. Further, countermeasures can be enforced to minimise cyber attacks based on security analysis. However, modern networked systems are becoming large sized and dynamic (e.g., Cloud Computing systems). As a result, existing security models suffer from scalability problem, where it becomes infeasible to use them for modern networked systems that contain hundreds and thousands of hosts and vulnerabilities. Moreover, the dynamic nature of modern networked systems requires a responsive update in the security model to monitor how these changes may affect the security, but there is a lack of capabilities to efficiently manage these changes with existing security models. In addition, existing security models do not provide functionalities to capture and analyse the security of unknown attacks, where the combined effects of both known and unknown attacks can create unforeseen attack scenarios that may not be detected or mitigated. Therefore, the three goals of this thesis are to (i) develop security modelling and analysis methods that can scale to a large number of network components and adapts to changes in the networked system; (ii) develop efficient security assessment methods to formulate countermeasures; and (iii) develop models and metrics to incorporate and assess the security of unknown attacks. A lifecycle of security models is introduced in this thesis to concisely describe performance and functionalities of modern security models. The five phases in the lifecycle of security models are: (1) Preprocessing, (2) Generation, (3) Representation, (4) Evaluation, and (5) Modification. To achieve goal (i), a hierarchical security model is developed to reduce the computational costs of assessing the security while maintaining all security information, where each layer captures different security information. Then, a comparative analysis is presented to show the scalability and adaptability of security models. The complexity analysis showed that the hierarchical security model has better or equivalent complexities in all phases of the lifecycle in comparison to existing security models, while the performance analysis showed that in fact it is much more scalable in practical network scenarios. To achieve goal (ii), security assessment methods based on importance measures are developed. Network centrality measures are used to identify important hosts in the networked systems, and security metrics are used to identify important vulnerabilities in the host. Also, new network centrality measures are developed to improvise the lack of accuracy of existing network centrality measures when the attack scenarios consist of attackers located inside the networked system. Important hosts and vulnerabilities are identified using efficient algorithms with a polynomial time complexity, and the accuracy of these algorithms are shown as nearly equivalent to the naive method through experiments, which has an exponential complexity. To achieve goal (iii), unknown attacks are incorporated into the hierarchical security model and the combined effects of both known and unknown attacks are analysed. Algorithms taking into account all possible attack scenarios associated with unknown attacks are used to identify significant hosts and vulnerabilities. Approximation algorithms based on dynamic programming and greedy algorithms are also developed to improve the performance. Mitigation strategies to minimise the effects of unknown attacks are formulated on the basis of significant hosts and vulnerabilities identified in the analysis. Results show that mitigation strategies formulated on the basis of significant hosts and vulnerabilities can significantly reduce the system risk in comparison to randomly applying mitigations. In summary, the contributions of this thesis are: (1) the development and evaluation of the hierarchical security model to enhance the scalability and adaptability of security modelling and analysis; (2) a comparative analysis of security models taking into account scalability and adaptability; (3) the development of security assessment methods based on importance measures to identify important hosts and vulnerabilities in the networked system and evaluating their efficiencies in terms of accuracies and performances; and (4) the development of security analysis taking into account unknown attacks, which consists of evaluating the combined effects of both known and unknown attacks. Publications Arising from this Thesis Much of the work contained in this thesis has been published or submitted in peer-reviewed conferences and journals listed below. Unpublished work and preprint versions are included in the appendicies. Each publications are noted in parentheses for the corresponding chapters. 1. Hong, J. and Kim, D. ; “HARMs: Hierarchical Attack Representation Models for Network Security Analysis” in Proc. of the 10th Australian Information Security Management Conference in SECAU Security Congress (SECAU 2012), Dec. 2012. Perth, Australia, 74-81. (Chapters 2 and 3) 2. Hong, J. and Kim, D. ; “Performance analysis of scalable attack representation models” in Proc. of the 28th IFIP TC-11 International Information Security and Privacy Conference (SEC 2013), Jul. 2013. Auckland, New Zealand, 330-343. (Chapter 4) 3. Hong, J. and Kim, D. and Takaoka, T. ; “Scalable Attack Representation Model Using Logic Reduction Techniques” in Proc. of the 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2013), Jul. 2013. Melbourne, Australia, 404 411. (Chapter 2) 4. Hong, J. and Kim, D. ; “Scalable Security Analysis in Hierarchical Attack Representation Model using Centrality Measures” in Proc. of the 43rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshop (DSNW 2013), Jun. 2013. Budapest, Hungary, 1 8. (Chapter 7) 5. Hong, J. and Kim, D. ; “Scalable Security Model Generation and Analysis using k-importance Measure” in Proc. of the 9th International Conference on Security and Privacy in Communication Networks (SecureComm 2013), Sep 2013. Sydney, Australia, 270-287. (Chapters 3 and 6) 6. Hong, J. and Kim, D. ; “Scalable Security Models for Assessing Effectiveness of Moving Target Defenses” in Proc. of the 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2014), Jun 2014. Atlanta, USA, 515 526. (Chapters 2 and 5) 7. Hong, J. and Kim, D. and Haqiq, A. ; “What Vulnerability Do We Need To Patch First? ” in Proc. of the 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshop (DSNW 2014), Jun 2014. Atlanta, USA, 684 689. (Chapter 6) 8. Hong, J. and Eom, T. and Park, J. and Kim, D. ;“Scalable Security Analysis using Partition and Merge Approach in an Infrastructure as a Service Cloud” in Proc. of the 11th IEEE International Conference on Ubiquitous Intelligence and Computing (UIC 2014), Dec 2014. Bali, Indonesia. (Chapter 2) 9. Hong, J. and Kim, D. ; “Security Assessment and Mitigation of Unknown Attacks” submitted to the 45th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2015), Dec 2014 (Chapter 8, Appendix A) 10. Hong, J. and Kim, D. ; “Performance Analysis of Graph-based Security Models” under revision for the Elsevier Special Issue of the Computers and Security Journal, Oct 2014 (Chapters 2 and 4, Appendix B). 11. Hong, J. and Kim, D. ; “Assessing the Effectiveness of Moving Target Defense using Security Models” under revision for the IEEE Special Issue on Transactions of Dependable and Secure Computing (TDSC) Journal, Oct 2014 (Chapters 2 and 5, Appendix C). 12. Hong, J. and Chung, C. and Huang, D. and Kim, D. ; “Survey of Graphbased and Tree-based Security Models” to be submitted to the IEEE Communications Surveys & Tutorials, Oct 2014 (Chapters 2 and 3, Appendix D)