The Experts below are selected from a list of 38943 Experts worldwide ranked by ideXlab platform

Xueqi Cheng - One of the best experts on this subject based on the ideXlab platform.

  • modeling and security analysis of Enterprise Network using attack defense stochastic game petri nets
    Security and Communication Networks, 2013
    Co-Authors: Yuanzhuo Wang, Chuang Lin, Kun Meng, Xueqi Cheng
    Abstract:

    In this paper, we propose a novel modeling method attack–defense stochastic game Petri nets (or ADSGN) to model and analyze the security issues in Enterprise Network. We firstly give the definition and modeling method algorithm of ADSGN and then propose the algorithm of the strategy. The proposed ADSGN method is successfully applied to describe the attack and defense courses in the Enterprise Network. Finally, we analyze the mean time to first security breach and the mean time to security breach in the Enterprise Network quantifiably, and proved that our method can also be applied to other areas with respect to game issues. Copyright © 2012 John Wiley & Sons, Ltd. (According to the characteristics of the Network attack and defense actions, we extend the previous work by proposing attack-defense stochastic game Petri nets (or ADSGNs), which can be used to model and analyze the competitive game issues by using classical methods from stochastic Petri nets. ADSGN are suitable to investigate the complex and dynamic game-related issues in Network attack. In this paper, we use ADSGN to model and analyze the Enterprise Network attacks, compute the Nash equilibrium to deduce the best-response strategies to defend the attacks. We believe that ADSGN can open a new avenue to handle the game-related issues in Network security.)

  • stochastic game net and applications in security analysis for Enterprise Network
    International Journal of Information Security, 2012
    Co-Authors: Yuanzhuo Wang, Chuang Lin, Kun Meng, Xueqi Cheng
    Abstract:

    Stochastic game theoretic framework has been used in many fields of Networks with interactive behaviors. However, further use of this framework is limited due to the following reasons. Firstly, it is difficult to build comprehensive and rigorous models for complex Network structures by the state-based game model. Secondly, solving and extending the dynamic behaviors of participators of the Network are nearly impossible, because of the complexity of state transitions. Last but not least, general game model is not able to describe and analyze specific events and behaviors in some kinds of Networks, like Enterprise Networks. In this paper, we propose a new modeling paradigm (stochastic game net, or SGN) for stochastic games representation with Petri nets. Based on our graphical tool, stochastic game problems can be described clearly, and the model can be solved and extended easily. Moreover, this paper puts forth a series of methods for modeling and analyzing the competitive game by SGN, which is the main contribution of this work. Our achievements are applied to the security analysis for Enterprise Networks. The analysis results prove the powerful ability of our achievements in solving the complicated and dynamic game problems. Furthermore, our approaches can be used to calculate the existence and the value of an equilibrium point.

Thomas Y Hou - One of the best experts on this subject based on the ideXlab platform.

  • ddos attack protection in the era of cloud computing and software defined Networking
    International Conference on Network Protocols, 2014
    Co-Authors: Bing Wang, Wenjing Lou, Yao Zheng, Thomas Y Hou
    Abstract:

    Cloud computing has become the real trend of Enterprise IT service model that offers cost-effective and scalable processing. Meanwhile, Software-Defined Networking (SDN) is gaining popularity in Enterprise Networks for flexibility in Network management service and reduced operational cost. There seems a trend for the two technologies to go hand-in-hand in providing an Enterprise's IT services. However, the new challenges brought by the marriage of cloud computing and SDN, particularly the implications on Enterprise Network security, have not been well understood. This paper sets to address this important problem. We start by examining the security impact, in particular, the impact on DDoS attack defense mechanisms, in an Enterprise Network where both technologies are adopted. We find that SDN technology can actually help Enterprises to defend against DDoS attacks if the defense architecture is designed properly. To that end, we propose a DDoS attack mitigation architecture that integrates a highly programmable Network monitoring to enable attack detection and a flexible control structure to allow fast and specific attack reaction. The simulation results show that our architecture can effectively and efficiently address the security challenges brought by the new Network paradigm.

Yuanzhuo Wang - One of the best experts on this subject based on the ideXlab platform.

  • modeling and security analysis of Enterprise Network using attack defense stochastic game petri nets
    Security and Communication Networks, 2013
    Co-Authors: Yuanzhuo Wang, Chuang Lin, Kun Meng, Xueqi Cheng
    Abstract:

    In this paper, we propose a novel modeling method attack–defense stochastic game Petri nets (or ADSGN) to model and analyze the security issues in Enterprise Network. We firstly give the definition and modeling method algorithm of ADSGN and then propose the algorithm of the strategy. The proposed ADSGN method is successfully applied to describe the attack and defense courses in the Enterprise Network. Finally, we analyze the mean time to first security breach and the mean time to security breach in the Enterprise Network quantifiably, and proved that our method can also be applied to other areas with respect to game issues. Copyright © 2012 John Wiley & Sons, Ltd. (According to the characteristics of the Network attack and defense actions, we extend the previous work by proposing attack-defense stochastic game Petri nets (or ADSGNs), which can be used to model and analyze the competitive game issues by using classical methods from stochastic Petri nets. ADSGN are suitable to investigate the complex and dynamic game-related issues in Network attack. In this paper, we use ADSGN to model and analyze the Enterprise Network attacks, compute the Nash equilibrium to deduce the best-response strategies to defend the attacks. We believe that ADSGN can open a new avenue to handle the game-related issues in Network security.)

  • stochastic game net and applications in security analysis for Enterprise Network
    International Journal of Information Security, 2012
    Co-Authors: Yuanzhuo Wang, Chuang Lin, Kun Meng, Xueqi Cheng
    Abstract:

    Stochastic game theoretic framework has been used in many fields of Networks with interactive behaviors. However, further use of this framework is limited due to the following reasons. Firstly, it is difficult to build comprehensive and rigorous models for complex Network structures by the state-based game model. Secondly, solving and extending the dynamic behaviors of participators of the Network are nearly impossible, because of the complexity of state transitions. Last but not least, general game model is not able to describe and analyze specific events and behaviors in some kinds of Networks, like Enterprise Networks. In this paper, we propose a new modeling paradigm (stochastic game net, or SGN) for stochastic games representation with Petri nets. Based on our graphical tool, stochastic game problems can be described clearly, and the model can be solved and extended easily. Moreover, this paper puts forth a series of methods for modeling and analyzing the competitive game by SGN, which is the main contribution of this work. Our achievements are applied to the security analysis for Enterprise Networks. The analysis results prove the powerful ability of our achievements in solving the complicated and dynamic game problems. Furthermore, our approaches can be used to calculate the existence and the value of an equilibrium point.

  • security analysis of Enterprise Network based on stochastic game nets model
    International Conference on Communications, 2009
    Co-Authors: Yuanzhuo Wang, Chiawen Lin, Kun Meng
    Abstract:

    In this paper, we propose a novel modeling method, Stochastic Game Nets (SGN), and use it to model and analyze the security issues in Enterprise Networks. Firstly, the definition and modeling algorithm of Stochastic Game Nets are given. And then we apply the Stochastic Game Nets method to describe the attack and defense course in the Enterprise Networks successfully, and find a Nash equilibrium. Finally we analyze the confidentiality and integrity of the Enterprise Network quantificationally based on the model. The method can also be applied to other areas with respect to a game.

Bing Wang - One of the best experts on this subject based on the ideXlab platform.

  • DDoS attack protection in the era of cloud computing and Software-Defined Networking
    Computer Networks, 2015
    Co-Authors: Bing Wang, Wenjing Lou, Yao Zheng, Y. Thomas Hou
    Abstract:

    Cloud computing has become the real trend of Enterprise IT service model that offers cost-effective and scalable processing. Meanwhile, Software-Defined Networking (SDN) is gaining popularity in Enterprise Networks for flexibility in Network management service and reduced operational cost. There seems a trend for the two technologies to go hand-in-hand in providing an Enterprise's IT services. However, the new challenges brought by the marriage of cloud computing and SDN, particularly the implications on Enterprise Network security, have not been well understood. This paper sets to address this important problem. We start by examining the security impact, in particular, the impact on DDoS attack defense mechanisms, in an Enterprise Network where both technologies are adopted. We find that SDN technology can actually help Enterprises to defend against DDoS attacks if the defense architecture is designed properly. To that end, we propose a DDoS attack mitigation architecture that integrates a highly programmable Network monitoring to enable attack detection and a flexible control structure to allow fast and specific attack reaction. To cope with the new architecture, we propose a graphic model based attack detection system that can deal with the dataset shift problem. The simulation results show that our architecture can effectively and efficiently address the security challenges brought by the new Network paradigm and our attack detection system can effectively report various attacks using real-world Network traffic.

  • ddos attack protection in the era of cloud computing and software defined Networking
    International Conference on Network Protocols, 2014
    Co-Authors: Bing Wang, Wenjing Lou, Yao Zheng, Thomas Y Hou
    Abstract:

    Cloud computing has become the real trend of Enterprise IT service model that offers cost-effective and scalable processing. Meanwhile, Software-Defined Networking (SDN) is gaining popularity in Enterprise Networks for flexibility in Network management service and reduced operational cost. There seems a trend for the two technologies to go hand-in-hand in providing an Enterprise's IT services. However, the new challenges brought by the marriage of cloud computing and SDN, particularly the implications on Enterprise Network security, have not been well understood. This paper sets to address this important problem. We start by examining the security impact, in particular, the impact on DDoS attack defense mechanisms, in an Enterprise Network where both technologies are adopted. We find that SDN technology can actually help Enterprises to defend against DDoS attacks if the defense architecture is designed properly. To that end, we propose a DDoS attack mitigation architecture that integrates a highly programmable Network monitoring to enable attack detection and a flexible control structure to allow fast and specific attack reaction. The simulation results show that our architecture can effectively and efficiently address the security challenges brought by the new Network paradigm.

Chuang Lin - One of the best experts on this subject based on the ideXlab platform.

  • modeling and security analysis of Enterprise Network using attack defense stochastic game petri nets
    Security and Communication Networks, 2013
    Co-Authors: Yuanzhuo Wang, Chuang Lin, Kun Meng, Xueqi Cheng
    Abstract:

    In this paper, we propose a novel modeling method attack–defense stochastic game Petri nets (or ADSGN) to model and analyze the security issues in Enterprise Network. We firstly give the definition and modeling method algorithm of ADSGN and then propose the algorithm of the strategy. The proposed ADSGN method is successfully applied to describe the attack and defense courses in the Enterprise Network. Finally, we analyze the mean time to first security breach and the mean time to security breach in the Enterprise Network quantifiably, and proved that our method can also be applied to other areas with respect to game issues. Copyright © 2012 John Wiley & Sons, Ltd. (According to the characteristics of the Network attack and defense actions, we extend the previous work by proposing attack-defense stochastic game Petri nets (or ADSGNs), which can be used to model and analyze the competitive game issues by using classical methods from stochastic Petri nets. ADSGN are suitable to investigate the complex and dynamic game-related issues in Network attack. In this paper, we use ADSGN to model and analyze the Enterprise Network attacks, compute the Nash equilibrium to deduce the best-response strategies to defend the attacks. We believe that ADSGN can open a new avenue to handle the game-related issues in Network security.)

  • stochastic game net and applications in security analysis for Enterprise Network
    International Journal of Information Security, 2012
    Co-Authors: Yuanzhuo Wang, Chuang Lin, Kun Meng, Xueqi Cheng
    Abstract:

    Stochastic game theoretic framework has been used in many fields of Networks with interactive behaviors. However, further use of this framework is limited due to the following reasons. Firstly, it is difficult to build comprehensive and rigorous models for complex Network structures by the state-based game model. Secondly, solving and extending the dynamic behaviors of participators of the Network are nearly impossible, because of the complexity of state transitions. Last but not least, general game model is not able to describe and analyze specific events and behaviors in some kinds of Networks, like Enterprise Networks. In this paper, we propose a new modeling paradigm (stochastic game net, or SGN) for stochastic games representation with Petri nets. Based on our graphical tool, stochastic game problems can be described clearly, and the model can be solved and extended easily. Moreover, this paper puts forth a series of methods for modeling and analyzing the competitive game by SGN, which is the main contribution of this work. Our achievements are applied to the security analysis for Enterprise Networks. The analysis results prove the powerful ability of our achievements in solving the complicated and dynamic game problems. Furthermore, our approaches can be used to calculate the existence and the value of an equilibrium point.

  • Application level Network access control system based on TNC architecture for Enterprise Network
    Proceedings - 2010 IEEE International Conference on Wireless Communications Networking and Information Security WCNIS 2010, 2010
    Co-Authors: Zhen Chen, Fa Chao Deng, An An Luo, Run Hua Zhang, Guo-dong Li, Xin Jiang, Chuang Lin
    Abstract:

    Traditional NAC system in Enterprise Network is in coarse granularity (e.g. IP or MAC address) and lack of flexibility. Recently the demand in tight control of the Enterprise Network to defense the misuse and security issues become more and more urgent. Based on the TCG TNC standard, an application level Network access control mechanism is proposed and implemented. With TNC client/server model in hand, a client is designed to enhance TNC client with the function of host flow controller (HFC), and intercepts each application Network access request(ANAR) and transfer it to PDP server to authorize the access request. When a sensor (i.e. intrusion detection system) detects any malicious traffic, host flow controller and Network flow controller can identify the application that origins this traffic by querying Metadata Access Point (MAP) server and block this application's Network access. A prototype system is implemented to demonstrate the design and can be used to defense the anomaly Network behaviors. The prototype system demonstrates that the hosts, switches, firewalls and IDS can work together to detect, diagnose and protect Enterprise Network from the malicious applications attack initiated inside or outside of an Enterprise Network, quarantine unhealthy hosts and make the Enterprise Network more reliable and trustworthy.