Fahad Ahmed Shaban

Improving Security Policy Validation in Distributed Systems Using Attack Graph Simulations

Validation of security policies in distributed systems is difficult because rules are heterogeneous, interact in non-obvious ways, and static checks often overlook multi-stage attacker chains. We offer a unified framework to translate real policies, and in parallel give visibility into policy-aware attack graphs (PAAGs...