Quantitative Evaluation of Attack Defense Trees using Stochastic Timed Automata - Chaire Cybersécurité sur l'analyse de la menace Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

Quantitative Evaluation of Attack Defense Trees using Stochastic Timed Automata

Résumé

Security analysis is without doubt one of the most important issues in a society relying heavily on computer infrastructure. Unfortunately security analysis is also very difficult due to the complexity of systems. This is bad enough when dealing with ones own computer systems-but nowadays organisations rely on third-party services-cloud services-along with their own antiquated legacy systems. Combined this makes it overwhelming difficult to obtain an overview of possible attack scenarios. Luckily, some formalisms such as attack trees exists that can help security analysts. However, temporal behaviour of the attacker is rarely considered by these formalisms. In this paper we build upon previous work on attack-defence trees to build a proper temporal semantics. We consider the attack-defence tree a reachability objective for an attacker and thereby separates the attacker logic from the attack-defence tree. We give a temporal stochastic semantics for arbitrary attackers (adhering to certain requirements to make the attacker " sane ") and we allow annotating attacker actions with time-dependent costs. Furthermore, we define what we call a cost-preserving attacker profile and we define a parameterised attacker profile. The defined semantics is implemented via a translation to uppaal SMC. Using uppaal SMC we answers various questions such as the expected cost of an attack, we find the probability of a successful attack and we even show how an attacker can find a optimal parameter setting using ANOVA and Tukeys test.
Fichier principal
Vignette du fichier
GramSec17_paper_5.pdf (868.83 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01640091 , version 1 (20-11-2017)

Identifiants

  • HAL Id : hal-01640091 , version 1

Citer

Peter Gjøl Jensen, Kim G. Larsen, Axel Legay, Danny Bøgsted Poulsen. Quantitative Evaluation of Attack Defense Trees using Stochastic Timed Automata. GraMSec 2017 - The Fourth International Workshop on Graphical Models for Security, Aug 2017, Santa Barbara United States. ⟨hal-01640091⟩
247 Consultations
526 Téléchargements

Partager

Gmail Facebook X LinkedIn More