In this thesis, We propose 3S (Scalable Security Sates) analysis framework, a new approach of utilizing Software-Defined Networking (SDN)-based distributed firewall capabilities and the concept of stateful data plane to construct scalable attack graphs in near-realtime, which is a practical approach to use attack graph for realtime security decisions. Nevertheless, non-practical attack graph based solutions have been used in practice for realtime security analysis. There have been many research work trying to come up with a scalable solution for the attack graph. For instance, by using a Firewall to manage the security state, and/or a graphical analysis tools such as attack graphs for analysis.Īttack Graphs are powerful graphical security analysis tools as they provide a visual representation of all possible attack scenarios that an attacker may take to exploit system vulnerabilities.The attack graph's scalability, however, is a major concern for enumerating all possible attack scenarios as it is considered an NP-complete problem. There are many methods to provide security states' analysis and management.

With the increasing complexity of computing systems and the rise in the number of risks and vulnerabilities, it is necessary to provide a scalable security situation awareness tool to assist the system administrator in protecting the critical assets, as well as managing the security state of the system.

Retroshare dht disabled and firewalled