Transforming graphical system models to graphical attack models

Ivanova, Marieta Georgieva, Probst, Christian, Hansen, Rene Rydhof and Kammueller, Florian (2016) Transforming graphical system models to graphical attack models. Graphical Models for Security: Second International Workshop, GraMSec 2015, Verona, Italy, July 13, 2015, Revised Selected Papers. In: 2nd International Workshop on Graphical Models for Security, GraMSec 2015, co-located with CSF2015, 13 Jul 2015, Verona, Italy. ISBN 9783319299679. ISSN 0302-9743 (doi:10.1007/978-3-319-29968-6_6)

Abstract

Manually identifying possible attacks on an organisation is a complex undertaking; many different factors must be considered, and the resulting attack scenarios can be complex and hard to maintain as the organisation changes. System models provide a systematic representation of organisations that helps in structuring attack identification and can integrate physical, virtual, and social components. These models form a solid basis for guiding the manual identification of attack scenarios. Their main benefit, however, is in the analytic generation of attacks. In this work we present a systematic approach to transforming graphical system models to graphical attack models in the form of attack trees. Based on an asset in the model, our transformations result in an attack tree that represents attacks by all possible actors in the model, after which the actor in question has obtained the asset.

Item Type: Conference or Workshop Item (Paper)
Additional Information: Paper published as:
Ivanova M.G., Probst C.W., Hansen R.R., Kammüller F. (2016) Transforming Graphical System Models to Graphical Attack Models. In: Mauw S., Kordy B., Jajodia S. (eds) Graphical Models for Security. GraMSec 2015. Lecture Notes in Computer Science, vol 9390. Springer, Cham
Research Areas: A. > School of Science and Technology > Computer Science
Item ID: 16979
Useful Links:
Depositing User: Florian Kammueller
Date Deposited: 15 Jun 2015 10:22
Last Modified: 12 Sep 2018 14:30
URI: https://eprints.mdx.ac.uk/id/eprint/16979

Actions (login required)

Edit Item Edit Item