Ecole d'ingénieur et centre de recherche en Sciences du numérique

Model the system from adversary viewpoint: Threats identification and modeling

Sabir Idrees, Muhammad; Roudier, Yves; Apvrille, Ludovic

AIDP 2014, Advanced Intrusion Detection and Prevention Workshop, Co-located with IFIP SEC 2014, June 5th, 2014, Marrakech, Morocco / Also EPTCS 165, 2014

Security attacks are hard to understand, often expressed with unfriendly and limited details, making it difficult for security experts and for security analysts to create intelligible security specifications. For instance, to explain Why (attack objective), What (i.e., system assets, goals, etc.), and How (attack method), adversary achieved his attack goals. We introduce in this paper a security attack meta-model for our SysML-Sec framework [18], developed to improve the threat identification and modeling through the explicit representation of security concerns with knowledge representation techniques. Our proposed meta-model enables the specification of these concerns through ontological concepts which define the semantics of the security artifacts and introduced using SysML-Sec diagrams. This meta-model also enables representing the relationships that tie several such concepts together. This representation is then used for reasoning about the knowledge introduced by system designers as well as security experts through the graphical environment of the SysML-Sec framework.

Document Doi Arxiv Bibtex

Titre:Model the system from adversary viewpoint: Threats identification and modeling
Département:Sécurité numérique
Eurecom ref:4425
Bibtex: @inproceedings{EURECOM+4425, doi = {}, year = {2014}, title = {{M}odel the system from adversary viewpoint: {T}hreats identification and modeling}, author = {{S}abir {I}drees, {M}uhammad and {R}oudier, {Y}ves and {A}pvrille, {L}udovic}, booktitle = {{AIDP} 2014, {A}dvanced {I}ntrusion {D}etection and {P}revention {W}orkshop, {C}o-located with {IFIP} {SEC} 2014, {J}une 5th, 2014, {M}arrakech, {M}orocco / {A}lso {EPTCS} 165, 2014}, address = {{M}arrakech, {MAROC}}, month = {06}, url = {} }
Voir aussi: