A graph theoretical model of computer security From file sharing to social engineering

We describe a model of computer security that applies results from the statistical properties of graphs to human-computer systems. The model attempts to determine a safe threshold of interconnectivity in a human-computer system by ad hoc network analyses. The results can be applied to physical networks, social networks and to networks of clues in a forensic analysis. Access control, intrusions and social engineering can also be discussed as graphical and information theoretical relationships. Groups of users and shared objects, such as files or conversations, provide communications channels for the spread of both authorized and un-authorized information. We present numerical criteria for measuring the security of such systems and algorithms for finding the vulnerable points.