ConfigSynth: A Formal Framework for Network Security Design Synthesis

Transcription

1 ConfigSynth: A Formal Framework for Network Security Design Synthesis Mohammad Ashiqur Rahman and Ehab Al-Shaer CyberDNA Research Center, UNC Charlotte

2 Motivation Complexity of Security Configuration is a major source of network vulnerability: inappropriate or incorrect security configurations were responsible for 80% of United States Air Force vulnerabilities., Center for Strategic and International Studies Report on "Securing Cyberspace for the 44th Presidency, December human error is blamed for 50 to 80% of network outages., Juniper Networks Report, May 2008 the human factor themselves cause more than 30% of network outages, a major concern for carriers and causes big revenue-loss., British Telecom 2009 Lack of security design analytics and automation tools

3 Security Design Automation Problem Automating the design synthesis of security configurations by determining security countermeasures along with device placements that reduces risk (attack surface) while satisfying different constraints: Security requirements Business (Usability and Cost) constraints Mission objective (Connectivity requirements)

4 Challenge: 1 Contention between the security and usability constraints. Lack of metrics to measure these factors. Budget constraints. Security architecture should consider large-scale networks.

5 Challenges: 2 Contention between the security and usability constraints. Lack of metrics to measure these factors. Budget constraints. Security architecture should consider large-scale networks.

6 Challenge: 3 Contention between the security and usability constraints. Lack of metrics to measure these factors. Budget constraints. Security architecture should consider large-scale networks.

7 Challenge: 4 Contention between the security and usability constraints. Lack of metrics to measure these factors. Budget constraints. Security architecture should consider largescale networks.

8 Architecture Network Topology and Placement Strategy Connectivity Requirements User-defined Constraints Security Device Placement Model Security Policy Usability Constraint Model ConfigSynth SMT Solver Configuration Synthesis Cost Isolation, Usability, and Cost Model ConfigSynth Security-Device Placements Security Specifications Usability Specifications Cost Specifications

9 Architecture Network Topology and Placement Strategy Connectivity Requirements User-defined Constraints Security Device Placement Model Security Policy Usability Constraint Model SMT Solver Configuration Synthesis Cost Security, Usability, and Cost Model ConfigSynth Security-Device Placements Security Specifications Usability Specifications Cost Specifications

10 Architecture Network Topology and Placement Strategy Connectivity Requirements User-defined Constraints Security Device Placement Model Security Policy Usability Constraint Model SMT Solver Configuration Synthesis Evaluation Cost Security, Usability, and Cost Model ConfigSynth Security-Device Placements Security Specifications Usability Specifications Cost Specifications

11 Security in terms of Isolation Security requirements are indicated by isolation measures between the hosts. An isolation pattern signifies the type of security resistance. Network level isolation patterns: Access deny Trusted communication, i.e., authenticated/encrypted communication. Payload inspection. Source identity hiding communication. Traffic forwarding through proxy.

12 Isolation Model

13 Isolation Score

14 Isolation Requirement

15 Usability Constraint

16 Cost Constraint

17 Miscellaneous Constraints

18 Analytical Result The maximum possible isolation with respect to the usability constraint considering a fixed cost constraint

19 Evaluation The model synthesis time with respect to the number of hosts.

20 Summary Our work has been accepted for publication in IEEE ICDCS 2013 (13% acceptance rate). Future works We are investigating the methodologies for the risk evaluation of the synthesized security design, and hypothesis generation for feedback controls to the synthesis engine. Interactive security analytics Thanks