Parametric Analyses of Attack-Fault Trees

Étienne André, Didier Lime, Mathias Ramparison, Mariëlle Stoelinga

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

2 Citations (Scopus)

Abstract

Risk assessment of cyber-physical systems, such as power plants, connected devices and IT-infrastructures has always been challenging: safety (i.e., absence of unintentional failures) and security (i. e., no disruptions due to attackers) are conditions that must be guaranteed. One of the traditional tools used to help considering these problems is attack trees, a tree-based formalism inspired by fault trees, a well-known formalism used in safety engineering. In this paper we define and implement the translation of attack-fault trees (AFTs) to a new extension of timed automata, called parametric weighted timed automata. This allows us to parametrize constants such as time and discrete costs in an AFT and then, using the model-checker IMITATOR, to compute the set of parameter values such that a successful attack is possible. Using the different sets of parameter values computed, different attack and fault scenarios can be deduced depending on the budget, time or computation power of the attacker, providing helpful data to select the most efficient counter-measure.

Original languageEnglish
Title of host publicationProceedings - 2019 19th International Conference on Application of Concurrency to System Design, ACSD 2019
Place of PublicationPiscataway, NJ
PublisherIEEE
Pages33-42
Number of pages10
ISBN (Electronic)978-1-7281-3843-5
ISBN (Print)978-1-7281-3844-2
DOIs
Publication statusPublished - Jun 2019

Publication series

NameProceedings - International Conference on Application of Concurrency to System Design, ACSD
PublisherIEEE
Volume2019
ISSN (Print)1550-4808
ISSN (Electronic)2374-8567

    Fingerprint

Keywords

  • Attack-fault trees
  • Imitator
  • Parametric timed automata
  • Security

Cite this

André, É., Lime, D., Ramparison, M., & Stoelinga, M. (2019). Parametric Analyses of Attack-Fault Trees. In Proceedings - 2019 19th International Conference on Application of Concurrency to System Design, ACSD 2019 (pp. 33-42). (Proceedings - International Conference on Application of Concurrency to System Design, ACSD; Vol. 2019). Piscataway, NJ: IEEE. https://doi.org/10.1109/ACSD.2019.00008