Costs Technique for Analysis Attacks Graphs in Computer Systems

Abstract

In this paper, we define a new technique for analysing attack graphs in order to protect networks and computer systems from the risks and threats that can affect them. Our approach is based on logic expression of attacks scenarios, generated by any tool, in order to obtain a minimal set of vulnerabilities to remove. After identifying the dependencies between these vulnerabilities we propose the best cost paths to remove. As a result, we obtain the deleted paths with a minimal cost.