|
Title:
|
NETWORK SECURITY DESIGN FOR THE NEXT GENERATION ENTERPRISES |
|
Author(s):
|
Adnan Javed , Kamran Khalid , Amjad Umar |
|
ISBN:
|
972-8924-16-X |
|
Editors:
|
Pedro Isaías, Maggie McPherson and Frank Bannister |
|
Year:
|
2006 |
|
Edition:
|
1 |
|
Keywords:
|
IS security planning, wireless networks, attack trees, security patterns, next generation enterprises, CACIT |
|
Type:
|
Full Paper |
|
First Page:
|
509 |
|
Last Page:
|
516 |
|
Language:
|
English |
|
Cover:
|
|
|
Full Contents:
|
click to dowload 
|
|
Paper Abstract:
|
This paper describes a design approach and results from a planning tool that uses this approach to secure
wireless and wired networks for the next generation enterprises (NGEs). The basic idea is to identify highly
useful security patterns that represent solutions to different threats and correlate them to attack trees that can
be launched on a modern network before implementing a network. At the core of the planning tool is an
algorithm that discovers different devices and configurations in a network, launches a series of attacks on the
network, fetches the most appropriate security patterns and then allows the users to evaluate and decide on
how best to implement a solution approach. The tool is illustrated through an example. |
|
|
|
|
|
|
