arrow
返回

The meta attack language-a formal description

delete2023-07-01
delete8
delete
OA
AI
W
Wojciech Wideł
S
Simon Hacks *
M
Mathias Ekstedt
P
Pontus Johnson
R
Robert Lagerström
DOI:10.1016/j.cose.2023.103284delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Nowadays, IT infrastructures are involved in making innumerable aspects of our lives convenient, starting with water or energy distribution systems, and ending with e-commerce solutions and online banking services. In the worst case, cyberattacks on such infrastructures can paralyze whole states and lead to losses in terms of both human lives and money.One of the approaches to increase security of IT infrastructures relies on modeling possible ways of compromising them by potential attackers. To facilitate creation and reusability of such models, domain specific languages (DSLs) can be created. Ideally, a user will employ a DSL for modeling their infrastruc-ture of interest, with the domain-specific threats and attack logic being already encoded in the DSL by the domain experts.The Meta Attack Language (MAL) has been introduced previously as a meta-DSL for development of security-oriented DSLs. In this work, we define formally the syntax and a semantics of MAL to ease a common understanding of MAL's functionalities and enable reference implementations on different tech-nical platforms. It's applicability for modeling and analysis of security of IT infrastructures is illustrated with an example.(c) 2023 The Author(s). Published by Elsevier Ltd. This is an open access article under the CC BY license ( http://creativecommons.org/licenses/by/4.0/ )
Keyword:
Threat modeling
Attack simulation
Attack graphs
Domain specific language
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

R
Royal Institute of Technology
学者数:
1.8W
论文数: 1.8W
被引数: 25
S
Stockholm University
学者数:
1.8W
论文数: 1.7W
被引数: 32
引用论文

引用论文

Darwinism
err
IF0
err2010-08-29
err0
PREAI
errAlfred Russel Wallace
err分享
err收藏
VehicleLang: A probabilistic modeling and simulation language for modern vehicle IT infrastructures
err2022-06-01
err8
errOAAI
errKatsikeas, Sotirios; Johnsson, Pontus; Hacks, Simon; Lagerstrom, Robert
err分享
err收藏
err分享
err收藏
Characterization of Cr-Hydrocarbyl Species via Pulse EPR in the Study of Ethylene Tetramerization Catalysis
err2020-11-25
err0
errOAAI
errNathanael A. Hirscher; Charles H. Arnett; Paul H. Oyala; Theodor Agapie
err分享
err收藏
Homogeneous Hydrogenation of Benzo[b]thiophene by Use of Rhodium and Iridium Complexes as the Catalyst Precursors:  Kinetic and Mechanistic Aspects
err1997-05-27
err0
PREAI
errVerónica Herrera; Alberto Fuentes; Merlín Rosales; Roberto A. Sánchez-Delgado; Claudio Bianchini; Andrea Meli; Francesco Vizza
err分享
err收藏
SECTET: an extensible framework for the realization of secure inter-organizational workflows
err2006-10-01
err30
PREAI
errHafner, Michael; Breu, Ruth; Agreiter, Berthold; Nowak, Andrea
err分享
err收藏
P2CySeMoL: Predictive, Probabilistic Cyber Security Modeling Language
err2015-11-01
err50
PREAI
errHolm, Hannes; Shahzad, Khurram; Buschle, Markus; Ekstedt, Mathias
err分享
err收藏
学者 查看更多内容