Sequential and Parallel Attack Tree Modelling

Florian Arnold; Dennis Guck; Rajesh Kumar; Mariëlle Stoelinga

doi:10.1007/978-3-319-24249-1_25

Sequential and Parallel Attack Tree Modelling

Florian Arnold
, Dennis Guck
, Rajesh Kumar
, Mariëlle Stoelinga

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

42 Citations (Scopus)

26 Downloads (Pure)

Abstract

The intricacy of socio-technical systems requires a careful planning and utilisation of security resources to ensure uninterrupted, secure and reliable services. Even though many studies have been conducted to understand and model the behaviour of a potential attacker, the detection of crucial security vulnerabilities in such a system still provides a substantial challenge for security engineers. The success of a sophisticated attack crucially depends on two factors: the resources and time available to the attacker; and the stepwise execution of interrelated attack steps. This paper presents an extension of dynamic attack tree models by using both, the sequential and parallel behaviour of AND and OR-gates. Thereby we take great care to allow the modelling of any kind of temporal and stochastic dependencies which might occur in the model. We demonstrate the applicability on several case studies.

Original language	English
Title of host publication	Computer Safety, Reliability, and Security
Subtitle of host publication	SAFECOMP 2015 Workshops, ASSURE, DECSoS. ISSE, ReSA4CI, and SASSUR, Delft, The Netherlands, September 22, 2015, Proceedings
Editors	Floor Koornneef, Coen van Gulijk
Place of Publication	Cham
Publisher	Springer
Pages	291-299
Number of pages	9
ISBN (Electronic)	978-3-319-24249-1
ISBN (Print)	978-3-319-24248-4
DOIs	https://doi.org/10.1007/978-3-319-24249-1_25
Publication status	Published - Sept 2015
Event	34th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2015 - Delft, Netherlands Duration: 23 Sept 2015 → 25 Sept 2015 Conference number: 34 http://safecomp2015.tudelft.nl/

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	9338
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	34th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2015
Abbreviated title	SAFECOMP
Country/Territory	Netherlands
City	Delft
Period	23/09/15 → 25/09/15
Internet address	http://safecomp2015.tudelft.nl/

Keywords

EC Grant Agreement nr.: FP7/318003
EC Grant Agreement nr.: FP7/2007-2013
SEQ-OR
Case studies
Markov automata
Attack tree
Security analysis
Sequential and parallel

Access to Document

10.1007/978-3-319-24249-1_25

Cite this

Arnold, F., Guck, D., Kumar, R., & Stoelinga, M. (2015). Sequential and Parallel Attack Tree Modelling. In F. Koornneef, & C. van Gulijk (Eds.), Computer Safety, Reliability, and Security: SAFECOMP 2015 Workshops, ASSURE, DECSoS. ISSE, ReSA4CI, and SASSUR, Delft, The Netherlands, September 22, 2015, Proceedings (pp. 291-299). (Lecture Notes in Computer Science; Vol. 9338). Springer. https://doi.org/10.1007/978-3-319-24249-1_25

Arnold, Florian ; Guck, Dennis ; Kumar, Rajesh et al. / Sequential and Parallel Attack Tree Modelling. Computer Safety, Reliability, and Security: SAFECOMP 2015 Workshops, ASSURE, DECSoS. ISSE, ReSA4CI, and SASSUR, Delft, The Netherlands, September 22, 2015, Proceedings. editor / Floor Koornneef ; Coen van Gulijk. Cham : Springer, 2015. pp. 291-299 (Lecture Notes in Computer Science).

@inproceedings{451bb9bff36348ec9d6aef9b5081e830,

title = "Sequential and Parallel Attack Tree Modelling",

abstract = "The intricacy of socio-technical systems requires a careful planning and utilisation of security resources to ensure uninterrupted, secure and reliable services. Even though many studies have been conducted to understand and model the behaviour of a potential attacker, the detection of crucial security vulnerabilities in such a system still provides a substantial challenge for security engineers. The success of a sophisticated attack crucially depends on two factors: the resources and time available to the attacker; and the stepwise execution of interrelated attack steps. This paper presents an extension of dynamic attack tree models by using both, the sequential and parallel behaviour of AND and OR-gates. Thereby we take great care to allow the modelling of any kind of temporal and stochastic dependencies which might occur in the model. We demonstrate the applicability on several case studies.",

keywords = "EC Grant Agreement nr.: FP7/318003, EC Grant Agreement nr.: FP7/2007-2013, SEQ-OR, Case studies, Markov automata, Attack tree, Security analysis, Sequential and parallel",

author = "Florian Arnold and Dennis Guck and Rajesh Kumar and Mari{\"e}lle Stoelinga",

note = "Foreground = 80\%; Type of activity = conference; Main leader = UT; Type of audience = scientific community; Size of audience = 30; Countries addressed = international;; 34th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2015, SAFECOMP ; Conference date: 23-09-2015 Through 25-09-2015",

year = "2015",

month = sep,

doi = "10.1007/978-3-319-24249-1\_25",

language = "English",

isbn = "978-3-319-24248-4",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "291--299",

editor = "Floor Koornneef and \{van Gulijk\}, Coen",

booktitle = "Computer Safety, Reliability, and Security",

address = "Germany",

url = "http://safecomp2015.tudelft.nl/",

}

Arnold, F, Guck, D, Kumar, R & Stoelinga, M 2015, Sequential and Parallel Attack Tree Modelling. in F Koornneef & C van Gulijk (eds), Computer Safety, Reliability, and Security: SAFECOMP 2015 Workshops, ASSURE, DECSoS. ISSE, ReSA4CI, and SASSUR, Delft, The Netherlands, September 22, 2015, Proceedings. Lecture Notes in Computer Science, vol. 9338, Springer, Cham, pp. 291-299, 34th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2015, Delft, Netherlands, 23/09/15. https://doi.org/10.1007/978-3-319-24249-1_25

Sequential and Parallel Attack Tree Modelling. / Arnold, Florian; Guck, Dennis; Kumar, Rajesh et al.
Computer Safety, Reliability, and Security: SAFECOMP 2015 Workshops, ASSURE, DECSoS. ISSE, ReSA4CI, and SASSUR, Delft, The Netherlands, September 22, 2015, Proceedings. ed. / Floor Koornneef; Coen van Gulijk. Cham: Springer, 2015. p. 291-299 (Lecture Notes in Computer Science; Vol. 9338).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Sequential and Parallel Attack Tree Modelling

AU - Arnold, Florian

AU - Guck, Dennis

AU - Kumar, Rajesh

AU - Stoelinga, Mariëlle

N1 - Conference code: 34

PY - 2015/9

Y1 - 2015/9

N2 - The intricacy of socio-technical systems requires a careful planning and utilisation of security resources to ensure uninterrupted, secure and reliable services. Even though many studies have been conducted to understand and model the behaviour of a potential attacker, the detection of crucial security vulnerabilities in such a system still provides a substantial challenge for security engineers. The success of a sophisticated attack crucially depends on two factors: the resources and time available to the attacker; and the stepwise execution of interrelated attack steps. This paper presents an extension of dynamic attack tree models by using both, the sequential and parallel behaviour of AND and OR-gates. Thereby we take great care to allow the modelling of any kind of temporal and stochastic dependencies which might occur in the model. We demonstrate the applicability on several case studies.

AB - The intricacy of socio-technical systems requires a careful planning and utilisation of security resources to ensure uninterrupted, secure and reliable services. Even though many studies have been conducted to understand and model the behaviour of a potential attacker, the detection of crucial security vulnerabilities in such a system still provides a substantial challenge for security engineers. The success of a sophisticated attack crucially depends on two factors: the resources and time available to the attacker; and the stepwise execution of interrelated attack steps. This paper presents an extension of dynamic attack tree models by using both, the sequential and parallel behaviour of AND and OR-gates. Thereby we take great care to allow the modelling of any kind of temporal and stochastic dependencies which might occur in the model. We demonstrate the applicability on several case studies.

KW - EC Grant Agreement nr.: FP7/318003

KW - EC Grant Agreement nr.: FP7/2007-2013

KW - SEQ-OR

KW - Case studies

KW - Markov automata

KW - Attack tree

KW - Security analysis

KW - Sequential and parallel

U2 - 10.1007/978-3-319-24249-1_25

DO - 10.1007/978-3-319-24249-1_25

M3 - Conference contribution

SN - 978-3-319-24248-4

T3 - Lecture Notes in Computer Science

SP - 291

EP - 299

BT - Computer Safety, Reliability, and Security

A2 - Koornneef, Floor

A2 - van Gulijk, Coen

PB - Springer

CY - Cham

T2 - 34th International Conference on Computer Safety, Reliability, and Security, SAFECOMP 2015

Y2 - 23 September 2015 through 25 September 2015

ER -

Arnold F, Guck D, Kumar R, Stoelinga M. Sequential and Parallel Attack Tree Modelling. In Koornneef F, van Gulijk C, editors, Computer Safety, Reliability, and Security: SAFECOMP 2015 Workshops, ASSURE, DECSoS. ISSE, ReSA4CI, and SASSUR, Delft, The Netherlands, September 22, 2015, Proceedings. Cham: Springer. 2015. p. 291-299. (Lecture Notes in Computer Science). doi: 10.1007/978-3-319-24249-1_25

Sequential and Parallel Attack Tree Modelling

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this