Abstract | ||
---|---|---|
Attack surface is a valuable metric that help administrators of enterprise networks to evaluate the risk and security of the entire network. In this paper, we first distinguish the internal attack surface observed by the network administrators from the external attack surface that can be detected by the external attackers. In contrast to the traditional attack surface reduction, we propose a new attack surface expansion (ASE) mechanism that focuses on expanding the external attack surface, so that external attackers cannot easily identify the real internal attack surface from a much larger external attack surface. |
Year | DOI | Venue |
---|---|---|
2014 | 10.1145/2665936.2665939 | SafeConfig |
Keywords | Field | DocType |
security and protection,internal attack surface,attack surface expansion,external attack surface,general | Attack surface,Computer science,Computer security,Computer network,Application layer DDoS attack | Conference |
Citations | PageRank | References |
7 | 0.58 | 4 |
Authors | ||
2 |
Name | Order | Citations | PageRank |
---|---|---|---|
Kun Sun | 1 | 142 | 12.80 |
Sushil Jajodia | 2 | 9375 | 1839.16 |