Inferring the stealthy bridges between enterprise network islands in cloud using cross-layer bayesian networks

Xiaoyan Sun, Jun Dai, Anoop Singhal, Peng Liu

Research output: Chapter in Book/Report/Conference proceedingChapter

3 Scopus citations

Abstract

Enterprise networks are migrating to the public cloud to acquire computing resources for promising benefits in terms of efficiency, expense, and flexibility. Except for some public services, the enterprise network islands in cloud are expected to be absolutely isolated from each other. However, some “stealthy bridges” may be created to break such isolation due to two features of the public cloud: virtual machine image sharing and virtual machine co-residency. This paper proposes to use cross-layer Bayesian networks to infer the stealthy bridges existing between enterprise network islands. Prior to constructing cross-layer Bayesian networks, cloud-level attack graphs are built to capture the potential attacks enabled by stealthy bridges and reveal hidden possible attack paths. The result of the experiment justifies the crosslayer Bayesian network’s capability of inferring the existence of stealthy bridges given supporting evidence from other intrusion steps in a multistep attack.

Original languageEnglish (US)
Title of host publicationLecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
PublisherSpringer Verlag
Pages3-23
Number of pages21
DOIs
StatePublished - 2015

Publication series

NameLecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
Volume152
ISSN (Print)1867-8211

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications

Fingerprint

Dive into the research topics of 'Inferring the stealthy bridges between enterprise network islands in cloud using cross-layer bayesian networks'. Together they form a unique fingerprint.

Cite this