Sequential and Parallel Attack Tree Modelling
Sequential and Parallel Attack Tree Modelling
复制标题
顺序和并行攻击树建模
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
M. Stoelinga
中科院分区：
文献类型：
--
作者：
F. Arnold;Dennis Guck;Rajesh Kumar;M. Stoelinga
社会技术系统错综复杂，需要仔细规划和利用安全资源，以确保不间断、安全和可靠的服务。尽管已经进行了许多研究来了解潜在攻击者的行为并对其进行建模，但检测此类系统中的关键安全漏洞仍然给安全工程师带来了巨大的挑战。复杂攻击的成功关键取决于两个因素：攻击者可用的资源和时间；以及逐步执行相互关联的攻击步骤。利用与门和或门的顺序和并行行为，提出了动态攻击树模型的一种扩展。因此，我们非常小心地允许对模型中可能出现的任何类型的时间和随机依赖进行建模。我们在几个案例研究中演示了该方法的适用性。
The intricacy of socio-technical systems requires a careful planning and utilisation of security resources to ensure uninterrupted, secure and reliable services. Even though many studies have been conducted to understand and model the behaviour of a potential attacker, the detection of crucial security vulnerabilities in such a system still provides a substantial challenge for security engineers. The success of a sophisticated attack crucially depends on two factors: the resources and time available to the attacker; and the stepwise execution of interrelated attack steps. This paper presents an extension of dynamic attack tree models by using both, the sequential and parallel behaviour of AND and OR-gates. Thereby we take great care to allow the modelling of any kind of temporal and stochastic dependencies which might occur in the model. We demonstrate the applicability on several case studies.