Utilizing attack enumerations to study SDN/NFV vulnerabilities - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2018

Utilizing attack enumerations to study SDN/NFV vulnerabilities


Several cybersecurity attack enumerations area available today. These enumerations present lists of known attack patterns (CAPEC), security weaknesses (CWE) or cybersecurity vulnerabilities (CVE). These enumerations are being developed separately and manually. In this paper, we present our efforts in determine the relations between enumerations automatically. We rely on text-based, graph-based and recommendation-based approaches. Then we present of using the prediction in recommending related attacks to SDN/NFV security issues. Experimental results showed that we can predict the relations at high AU C and F − 1 scores. Furthermore, the results gave us some insights about how the enumerations are created and linked, and some suggestions to improve the process in the future. We also showed
Fichier principal
Vignette du fichier
Sofnetics2018.pdf (301.46 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01763368 , version 1 (11-04-2018)
hal-01763368 , version 2 (06-08-2018)


  • HAL Id : hal-01763368 , version 1


Quang-Vinh Dang, Jérôme François. Utilizing attack enumerations to study SDN/NFV vulnerabilities. IEEE ETSN - Emerging Trends in Softwarized Networks, Jun 2018, Montreal, Canada. ⟨hal-01763368v1⟩
301 View
542 Download


Gmail Facebook X LinkedIn More