Quantifying Computer Network Security

<p>Simplifying network security data to the point that it is readily accessible and usable by a wider audience is increasingly becoming important, as networks become larger and security conditions and threats become more dynamic and complex, requiring a broader and more varied security staff makeup. With the need for a simple metric to quantify the security level on a network, this thesis proposes: simplify a network’s security risk level into a simple metric. Methods for this simplification of an entire network’s security level are conducted on several characteristic networks. Identification of computer network port vulnerabilities from NIST’s Network Vulnerability Database (NVD) are conducted, and via utilization of NVD’s Common Vulnerability Scoring System values, composite scores are created for each computer on the network, and then collectively a composite score is computed for the entire network, which accurately represents the health of the entire network. Special concerns about small numbers of highly vulnerable computers or especially critical members of the network are confronted.</p>

Name thesis:degree_name

Master of Science

Discipline thesis:degree_discipline

Department of Mathematics and Computer Science

Year

2011

Author dc:creator

• Burchett, Ian

Contributors dc:contributor

• Dr. Ron Yang (Director), Dr. Phillip Womble, Dr. James Gary

• computer networks
• NVD
• CVSS
• network security data
• security risk level
• Computer Sciences
• Databases and Information Systems
• OS and Networks

Repository record dc:identifier

https://digitalcommons.wku.edu/theses/1118

OAI identifier oai:identifier

oai:digitalcommons.wku.edu:theses-2120