Security-Critical Components Recognition Algorithm for Complex Heterogeneous Information Systems
Source abstract
Abstract
With the skyrocketing development of technologies, there are many issues in information security quantitative evaluation (ISQE) of complex heterogeneous information systems (CHISs). The development of CHIS calls for an ISQE model based on security-critical components to improve the efficiency of system security evaluation urgently. In this paper, we summarize the implication of critical components in different filed and propose a recognition algorithm of security-critical components based on threat attack tree to support the ISQE process. The evaluation model establishes a framework for ISQE of CHISs that are updated iteratively. Firstly, with the support of asset identification and topology data, we sort the security importance of each asset based on the threat attack tree and obtain the security-critical components (set) of the CHIS. Then, we build the evaluation indicator tree of the evaluation target and propose an ISQE algorithm based on the coefficient of variation to calculate the security quality value of the CHIS. Moreover, we present a novel indicator measurement uncertainty aiming to better supervise the performance of the proposed model. Simulation results show the advantages of the proposed algorithm in the evaluation of CHISs.
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Information and Cyber Security · Advanced Decision-Making Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (38)
Show source-provided references
1. One quantifiable security evaluation model for cloud computing platform
2. Block design-based key agreement for group data sharing in cloud computing10.1109/TDSC.2017.2725953 ↗
3. Scalable and configurable end-to-end collection and analysis of IoT security data: Towards end-to-end security in IoT systems
4. Demystifying IoT security: An exhaustive survey on IoT vulnerabilities and a first empirical look on internet-scale IoT exploitations10.1109/COMST.2019.2910750 ↗
5. Ontology integration in complex information systems with distributed architecture
6. Disintegration of operational capability of heterogeneous combat networks under incomplete information
7. Design of distributed heterogeneous general signal processing platform architecture
8. System architecture and key technologies of network security situation awareness system yhsas10.32604/cmc.2019.05192 ↗
9. SAFER: Development and evaluation of an iot device risk assessment framework in a multinational organization10.1145/3414173 ↗
10. The implementation process of our country’s information security product certification system
11. Security, privacy and safety evaluation of dynamic and static fleets of drones
12. J. Howell, “Number of connected IoT devices will surge to 125 billion by 2030,” Beijing, China, 2020. [Online]. Available: https://technology.ihs.com/596542/.
13. SoK: Security evaluation of home-based IoT deployments
14. The current research of IoT security
15. Cyber-security risk assessment framework for critical infrastructures
16. KNEMAG: Key node estimation mechanism based on attack graph for IOT security10.32604/jiot.2020.010035 ↗
17. Research on protecting information security based on the method of hierarchical classification in the era of big data
18. Data security defense and algorithm for edge computing based on mean field game10.32604/jcs.2020.010548 ↗
19. Benchmarking approach to compare web applications static analysis tools detecting owasp top ten security vulnerabilities10.32604/cmc.2020.010885 ↗
20. Security and privacy frameworks for access control big data systems10.32604/cmc.2019.06223 ↗
21. The revision status of common criteria
22. Z. Q. Wang, “Study on manufacturing quality control of hinge parts,” M.S. Thesis, Inner Mongolia Agricultural University, Hohhot, Inner Mongolia, China, 2009.
23. Y. Xu, “Research and implementation in key components tracking technology of common-rail pipe automatic assembly line and economic,” M.S. Thesis, Nanchang University, Nanchang, Jiangxi, China, 2019.
24. Design and analysis of key parts of top drive system of vehicle mounted drilling rig
25. Identification method of key parts and important parts of military enterprise model products
26. Analysis on the management of U.S. military aviation critical safety items and suggestions on domestic status quo
27. Recognition of the software key component based on the characteristic index fault forest model
28. Research on recognition of security key component of IT products based on threat trees
29. Knownsec, “Zoomeye, China,” 2020. [Online]. Available: https://www.zoomeye.org/component.
30. A. Qi, “Global eagle cloud situation is based on data service wall chart to improve situation awareness,” China, 2020. [Online]. Available: https://www.qianxin.com/news/detail?news_id=705.
31. Shodan, “The search engine for the internet of things,” China, 2020. [Online]. Available: https://www.shodan.io/.
32. F. H. Li, “The design and implementation of network equipment identification system,” M.S. Thesis, Beijing University of Posts and Telecommunications, Beijing, China, 2017.
33. Method based on traffic Fingerprint for IoT device identification and IoT security model
34. Attack trees: Modeling security threats
35. S. Adam, “Threat modeling, design and delivery of more secure software,” China: Machinery Industry Press, 2015. [Online]. Available: https://max.book118.com/html/2018/0802/6025012233001210.shtm.
36. CCMB-2017-04-004, “Common methodology for information technology security evaluation,” China, 2020. [Online]. Available: http://www.commoncriteriaportal.org/files/ccfiles/CEMV3.1%EF%BC%B25.pdf.
37. Security threats and risk assessment of IoT system
38. Dynamical and scalable evaluation model for dam seepage safety based on FDA