A SAT-based Autonomous Strategy for Security Vulnerability Management - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

A SAT-based Autonomous Strategy for Security Vulnerability Management

Résumé

Computer and network systems are consistently exposed to security threats, making their management even more complex. The management of known vulnerabilities plays a crucial role for ensuring their safe configurations and preventing security attacks. However, this activity should not generate new vulnerable states. In this paper we present a novel approach for autonomously assessing and remediating vulnerabilities. We describe a detailed mathematical model that supports this activity and we formalize the remediation decision process as a SAT problem. We present a framework that is able to assess OVAL vulnerability descriptions and perform corrective actions by using XCCDF-based descriptions of future machine states and the NETCONF protocol. We also provide details of our implemen- tation and evaluate its feasibility through a comprehensive set of experiments.
Fichier non déposé

Dates et versions

hal-01093121 , version 1 (10-12-2014)

Identifiants

  • HAL Id : hal-01093121 , version 1

Citer

Martin Barrere, Rémi Badonnel, Olivier Festor. A SAT-based Autonomous Strategy for Security Vulnerability Management. IEEE/IFIP International Symposium on Network Operations and Management (IEEE/IFIP NOMS'14), May 2014, Cracovie, Poland. ⟨hal-01093121⟩
199 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More