arrow
返回

Quantitative Security Risk Modeling and Analysis with RisQFLan

delete2021-10-01
delete7
delete
OA
AI
M
Maurice H. ter Beek *
A
Axel Legay
A
Alberto Lluch Lafuente
A
Andrea Vandin
DOI:10.1016/j.cose.2021.102381delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Domain-specific quantitative modeling and analysis approaches are fundamental in scenarios in which qualitative approaches are inappropriate or unfeasible. In this paper, we present a tool-supported approach to quantitative graph-based security risk modeling and analysis based on attack-defense trees. Our approach is based on QFLan, a successful domain-specific approach to support quantitative modeling and analysis of highly configurable systems, whose domain-specific components have been decoupled to facilitate the instantiation of the QFLan approach in the domain of graph-based security risk modeling and analysis. Our approach incorporates distinctive features from three popular kinds of attack trees, namely enhanced attack trees, capabilities-based attack trees and attack countermeasure trees, into the domain-specific modeling language. The result is a new framework, called RisQFLan, to support quantitative security risk modeling and analysis based on attack-defense diagrams. By offering either exact or statistical verification of probabilistic attack scenarios, RisQFLan constitutes a significant novel contribution to the existing toolsets in that domain. We validate our approach by highlighting the additional features offered by RisQFLan in three illustrative case studies from seminal approaches to graph-based security risk modeling analysis based on attack trees. (C) 2021 Elsevier Ltd. All rights reserved.
Keyword:
Graph-based security risk models
Attack-defense trees
Probabilistic model checking
Statistical model checking
Formal analysis tools
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

U
universite catholique louvain
学者数:
2.0W
论文数: 1.7W
被引数: 21
C
consiglio nazionale delle ricerche (cnr)
学者数:
6.2W
论文数: 5.7W
被引数: 48
学者 查看更多机构
引用论文

引用论文

A survey on the usability and practical applications of Graphical Security Models
err2017-11-01
err58
PREAI
errHong, Jin B.; Kim, Dong Seong; Chung, Chun-Jen; Huang, Dijiang
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
Clinical Significance of SERPINA1 Gene and Its Encoded Alpha1-antitrypsin Protein in NSCLC
err2019-09-04
err0
errOAAI
errEvrim Ercetin; Sarah Richtmann; Beatriz Martinez Delgado; Gema Gomez-Mariano; Sabine Wrenger; Elena Korenbaum; Bin Liu; David DeLuca; Mark P. Kühnel; Danny Jonigk; Kadriya Yuskaeva; Arne Warth; Thomas Muley; Hauke Winter; Michael Meister; Tobias Welte; Sabina Janciauskiene; Marc A. Schneider
err分享
err收藏
A role for endothelial nitric oxide synthase in intestinal stem cell proliferation and mesenchymal colorectal cancer
err2018-01-10
err0
errOAAI
errJon Peñarando; Laura M. López-Sánchez; Rafael Mena; Silvia Guil-Luna; Francisco Conde; Vanessa Hernández; Marta Toledano; Victoria Gudiño; Michela Raponi; Caroline Billard; Carlos Villar; César Díaz; José Gómez-Barbadillo; Juan De la Haba-Rodríguez; Kevin Myant; Enrique Aranda; Antonio Rodríguez-Ariza
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
Homogeneous Hydrogenation of Benzo[b]thiophene by Use of Rhodium and Iridium Complexes as the Catalyst Precursors:  Kinetic and Mechanistic Aspects
err1997-05-27
err0
PREAI
errVerónica Herrera; Alberto Fuentes; Merlín Rosales; Roberto A. Sánchez-Delgado; Claudio Bianchini; Andrea Meli; Francesco Vizza
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
学者 查看更多内容