TY - GEN
T1 - Refinement-aware generation of attack trees
AU - Gadyatskaya, O.
AU - Jhawar, R.
AU - Mauw, S.
AU - Trujillo-Rasua, R.
AU - Willemse, T.A.C.
PY - 2017
Y1 - 2017
N2 - Attack trees allow a security analyst to obtain an overview of the potential vulnerabilities of a system. Due to their refinement structure, attack trees support the analyst in understanding the system vulnerabilities at various levels of abstraction. However, contrary to manually synthesized attack trees, automatically generated attack trees are often not refinement-aware, making subsequent human processing much harder. The generation of attack trees in which the refined nodes correspond to semantically relevant levels of abstraction is still an open question. In this paper, we formulate the attack-tree generation problem and propose a methodology to, given a system model, generate attack trees with meaningful levels of abstraction.
AB - Attack trees allow a security analyst to obtain an overview of the potential vulnerabilities of a system. Due to their refinement structure, attack trees support the analyst in understanding the system vulnerabilities at various levels of abstraction. However, contrary to manually synthesized attack trees, automatically generated attack trees are often not refinement-aware, making subsequent human processing much harder. The generation of attack trees in which the refined nodes correspond to semantically relevant levels of abstraction is still an open question. In this paper, we formulate the attack-tree generation problem and propose a methodology to, given a system model, generate attack trees with meaningful levels of abstraction.
UR - http://www.scopus.com/inward/record.url?scp=85030168570&partnerID=8YFLogxK
U2 - 10.1007/978-3-319-68063-7_11
DO - 10.1007/978-3-319-68063-7_11
M3 - Conference contribution
AN - SCOPUS:85030168570
SN - 978-3-319-68062-0
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 164
EP - 179
BT - Security and Trust Management
A2 - Livraga, G.
A2 - Mitchell, C.
PB - Springer
CY - Dordrecht
T2 - 13th International Workshop on Security and Trust Management, STM 2017
Y2 - 14 September 2017 through 15 September 2017
ER -