A Petri-net model of network security testing

摘要

Given the increasing dependence of our societies on networked information systems, the overall security of these systems should be measured and improved. Existing security metrics have generally focused on measuring individual vulnerabilities without considering their combined effects. In this paper, we proposed a Petri-net based model. It retains key advantages of the flaw hypothesis and attack trees approaches while providing some new benefits. This novel model provides a theoretical foundation and a practical framework for continuously measuring network security in a dynamic environment.