An analysis approach for multi-stage network attacks

To understand overall vulnerability to network attack, one must consider attacker behavior not just in isolation, but also within its wider context. A M-FSM model was proposed for the multi-stage vulnerable operations. The goal of this M-FSM is to analyze how the implemented step-by-step operation, or more precisely each step activity within the whole operation, contributes to an attack goal. This model can be used to identify attack paths to critical network resources. From these attack paths an expression for network safety in terms of the initial configuration can be derived. Subsequently, the system manager can take measures to strengthen the network.