Security Automation Research : Challenges and Future Directions

http://iac.dtic.mil/iatac Configuration complexity imposes a heavy burden on both regular users and experienced administrators. This complexity dramatically reduces overall network assurability. For example, a report from the Center for Strategic and International Studies states that “inappropriate or incorrect security configurations were responsible for 80 percent of United States Air Force vulnerabilities.” [1] Juniper Networks report that “human error is blamed for 50 to 80 percent of network outages.” [2] It has been widely reported that the cost of system management has been growing exponentially over the years due to increasing complexity of system management including security configuration. [3] It also states that “more than 40 percent of the total IT budget of a $1 billion-plus company going to human labor and IT operations accounting for 80 percent to 90 percent of the budget.” [4]