arrow
返回

Security Countermeasures Selection Using the Meta Attack Language and Probabilistic Attack Graphs

delete2022-01-01
delete6
delete
OA
AI
W
Wojciech Wideł
P
Preetam Mukherjee
M
Mathias Ekstedt *
DOI:10.1109/ACCESS.2022.3200601delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Connecting critical infrastructure assets to the network is absolutely essential for modern industries. In contrast to the apparent advantages, network connectivity exposes other infrastructure vulnerabilities that can be exploited by attackers. To protect the infrastructure, precise countermeasure identification is necessary. In this regard, the objective for the security officers is to identify the optimal set of countermeasures under a variety of budgetary restrictions. Our approach is based on the Meta Attack Language framework, which allows for convenient modelling of said infrastructures, as well as for automatic generation of attack graphs describing attacks against them. We formalize the problem of the selection of countermeasures in this context. The formalization makes it possible to deal with an arbitrary number of budgets, expressing available resources of both monetary and time-like nature, and to model numerous dependencies between countermeasures, including order dependencies, mutual exclusivity, and interdependent implementation costs. We propose a flexible and scalable algorithm for the problem. The whole methodology is validated in practice on realistic models.
Keyword:
Security
DSL
Costs
Analytical models
Optimization
Computational modeling
Stochastic processes
Risk assessment
Threat modeling
Attack graphs
attack simulations
countermeasure selection
graphical security modeling
threat modeling

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

R
Royal Institute of Technology
学者数:
1.8W
论文数: 1.8W
被引数: 25
引用论文

引用论文

Characterization of microsatellite loci in Coffea arabica and related coffee species
err2001-12-25
err0
PREAI
errM. C. Combes; S. Andrzejewski; F. Anthony; B. Bertrand; P. Rovelli; G. Graziosi; P. Lashermes
err分享
err收藏
Utilization of Artificial Intelligence in Disease Prevention: Diagnosis, Treatment, and Implications for the Healthcare Workforce人工智能在疾病预防中的应用: 诊断,治疗以及对医疗保健人员的影响
err2022-03-24
err0
errOAAI
errShahid Ud Din Wani; Nisar Ahmad Khan; Gaurav Thakur; Surya Prakash Gautam; Mohammad Ali; Prawez Alam; Sultan Alshehri; Mohammed M. Ghoneim; Faiyaz Shakeel
err分享
err收藏
VehicleLang: A probabilistic modeling and simulation language for modern vehicle IT infrastructures
err2022-06-01
err8
errOAAI
errKatsikeas, Sotirios; Johnsson, Pontus; Hacks, Simon; Lagerstrom, Robert
err分享
err收藏
Dynamic Optimal Countermeasure Selection for Intrusion Response System
err2018-09-01
err36
errOAAI
errShameli-Sendi, Alireza; Louafi, Habib; He, Wenbo; Cheriet, Mohamed
err分享
err收藏
Clinical Significance of SERPINA1 Gene and Its Encoded Alpha1-antitrypsin Protein in NSCLC
err2019-09-04
err0
errOAAI
errEvrim Ercetin; Sarah Richtmann; Beatriz Martinez Delgado; Gema Gomez-Mariano; Sabine Wrenger; Elena Korenbaum; Bin Liu; David DeLuca; Mark P. Kühnel; Danny Jonigk; Kadriya Yuskaeva; Arne Warth; Thomas Muley; Hauke Winter; Michael Meister; Tobias Welte; Sabina Janciauskiene; Marc A. Schneider
err分享
err收藏
err分享
err收藏
err分享
err收藏
学者 查看更多内容