| Title | Security Risk Assessment of Server Hardware Architectures Using Graph Analysis |
| Publication Type | Conference Paper |
| Year of Publication | 2021 |
| Authors | Koteshwara, Sandhya |
| Conference Name | 2021 Asian Hardware Oriented Security and Trust Symposium (AsianHOST) |
| Date Published | dec |
| Keywords | Computer architecture, Computing Theory, graph theory, Hardware, hardware security, hardware security metrics, Measurement, Metrics, pubcrawl, Runtime, security metrics, security risk assessment, Servers, statistical analysis |
| Abstract | The growing complexity of server architectures, which incorporate several components with state, has necessitated rigorous assessment of the security risk both during design and operation. In this paper, we propose a novel technique to model the security risk of servers by mapping their architectures to graphs. This allows us to leverage tools from computational graph theory, which we combine with probability theory for deriving quantitative metrics for risk assessment. Probability of attack is derived for server components, with prior probabilities assigned based on knowledge of existing vulnerabilities and countermeasures. The resulting analysis is further used to compute measures of impact and exploitability of attack. The proposed methods are demonstrated on two open-source server designs with different architectures. |
| DOI | 10.1109/AsianHOST53231.2021.9699554 |
| Citation Key | koteshwara_security_2021 |
Security Risk Assessment of Server Hardware Architectures Using Graph Analysis