SysML-Sec attack graphs: Compact representations for complex attacks

Apvrille, Ludovic; Roudier, Yves
GRAMSEC 2015, 2nd International Workshop on Graphical Models for Security, Co-located with CSF 2015, 13 July 2015, Verona, Italy / Also published in LNCS, Vol. 9390/2015

We discuss in this paper the use of SysML-Sec attack graphs as a graphical and semi-formal representation for complex attacks. We illustrate this on a PC and mobile malware example. We furthermore provide examples of the expressivity of the operators used in such diagrams. We finally formalize the attack traces described by these operators based on timed automata. 


DOI
HAL
Type:
Conférence
City:
Verona
Date:
2015-07-13
Department:
Sécurité numérique
Eurecom Ref:
4733
Copyright:
© Springer. Personal use of this material is permitted. The definitive version of this paper was published in GRAMSEC 2015, 2nd International Workshop on Graphical Models for Security, Co-located with CSF 2015, 13 July 2015, Verona, Italy / Also published in LNCS, Vol. 9390/2015 and is available at : http://dx.doi.org/10.1007/978-3-319-29968-6_3
See also:

PERMALINK : https://www.eurecom.fr/publication/4733