Is my attack tree correct?

DOI10.1007/978-3-319-66402-6_7MaRDI QIDQ2167713zbMATH OpenOpenAlexFDO

Authors Maxime Audinot, Sophie Pinchinat, Barbara Kordy

Publication date 25 August 2022

Full work available at URL https://arxiv.org/abs/1706.08507, https://hal.inria.fr/hal-01686505/file/main.pdf

Mathematics Subject Classification ID

Computer security (68M25)

Abstract: Attack trees are a popular way to represent and evaluate potential security threats on systems or infrastructures. The goal of this work is to provide a framework allowing to express and check whether an attack tree is consistent with the analyzed system. We model real systems using transition systems and introduce attack trees with formally specified node labels. We formulate the correctness properties of an attack tree with respect to a system and study the complexity of the corresponding decision problems. The proposed framework can be used in practice to assist security experts in manual creation of attack trees and enhance development of tools for automated generation of attack trees.

Recommendations

• Attack-defense trees
• Attribution of attack trees
• Information Security and Cryptology - ICISC 2005
• On quantitative analysis of attack-defense trees with repeated labels
• Attack trees in Isabelle

Cites work

• Attack-defense trees
• DAG-based attack and defense modeling: don't miss the forest for the attack trees
• scientific article; zbMATH DE number 3870578 (Why is no real title available?)
• scientific article; zbMATH DE number 2196601 (Why is no real title available?)
• Information Security and Cryptology - ICISC 2005
• Model Checking Exact Cost for Attack Scenarios
• Modelling attack-defense trees using timed automata
• Probabilistic reasoning with graphical security models
• Quantitative attack tree analysis via priced timed automata
• Semantics for specialising attack trees based on linear logic
• The complexity of theorem-proving procedures

Cited in

(12)

• Attribution of attack trees
• A review of attack graph and attack tree visual syntax in cyber security
• Attack trees in Isabelle
• On quantitative analysis of attack-defense trees with repeated labels
• Attack-defense trees and two-player binary zero-sum extensive form games are equivalent
• scientific article; zbMATH DE number 1113949 (Why is no real title available?)
• DAG-based attack and defense modeling: don't miss the forest for the attack trees
• Formal Methods for Components and Objects
• Information Security and Cryptology - ICISC 2005
• Adversarial formal semantics of attack trees and related problems
• Semantics of attack-defense trees for dynamic countermeasures and a new hierarchy of star-free languages
• Attack trees vs. fault trees: two sides of the same coin from different currencies

This page was built for publication: Is my attack tree correct?

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2167713)