Scalable Edge Blocking Algorithms for Defending Active Directory Style Attack Graphs. (arXiv:2212.04326v1 [cs.CR])

Active Directory (AD) is the default security management system for Windows
domain networks. An AD environment naturally describes an attack graph where
nodes represent computers/accounts/security groups, and edges represent
existing accesses/known exploits that allow the attacker to gain access from
one node to another. Motivated by practical AD use cases, we study a
Stackelberg game between one attacker and one defender. There are multiple
entry nodes for the attacker to choose from and there is a single target
(Domain Admin). …

active directory algorithms attack blocking directory edge