Scalable network diversity modeling for assessing threats in cloud networks

Document Type

Book Chapter

Publication Date



Department of Computer Science


Network diversity based security metric is attracting increasing interest in cybersecurity research community. There have been several efforts towards network diversity modeling, for the purpose of evaluating a network’s robustness against potential attacks. However, those efforts commonly use traditional network resource graph abstraction to model network diversity, which are not scalable when applied to modern large scaled networked systems, which can be encountered in cloud environments. In this chapter, we introduce a hierarchical network resource graph abstraction method to improve the scalability of network diversity modeling. Specifically, we use a two-layer hierarchy to separate the network topology information (in the upper layer) from the resource information of each host (in the lower layer). Simulations show that the proposed approach is scalable for larger sized networked systems.

Publication Title

Wireless Networks