Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Journal Article

Aggregating Vulnerability Metrics in Enterprise Networks using Attack Graphs

Published: September 20, 2013
Citation: Journal of Computer Security vol. 21, no. 4, (September 2013) pp. 561-597


John Homer (Abilene Christian University), Su Zhang (KSU), Xinming Ou (KSU), David Schmidt (KSU), Yanhui Du (Chinese People's Public Security University), S. Raj Rajagopalan (Hewlett-Packard Laboratories), Anoop Singhal (NIST)



risk assessment; vulnerability metrics; attack graphs; enterprise network security management
Control Families

None selected



Supplemental Material:
Preprint (pdf)

Document History:
09/20/13: Journal Article (Final)