.png){kind=icon}
Return
Quantitative risk-based security prediction for component-based systems with explicitly modeled attack profiles
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jss.2007.11.716.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Systems and software architects require quantitative dependability evaluations, which allow them to compare the effect of their design decisions oil dependability properties. For security, however, quantitative evaluations have proven difficult, especially for component-based systems. in this paper, we present a risk-based approach that creates modular attack trees for each component in the system. These modular attack trees are specified as parametric constraints, which allow quantifying the probability of security breaches that occur due to internal component vulnerabilities as well as vulnerabilities in the component's deployment environment. In the second case. attack probabilities are passed between system components as appropriate to model attacks that exploit vulnerabilities in multiple system components. The probability of a Successful attack is determined with respect to a set of attack profiles that are chosen to represent potential attackers and corresponding environmental conditions. Based on these attack probabilities and the Structure of the modular attack trees, risk measures call be estimated for the complete system and compared with the tolerable risk demanded by stakeholders. The practicability of this approach is demonstrated with ail example that evaluates the confidentiality of a distributed document management system. (C) 2007 Elsevier Inc. All rights reserved.
Keywords:
model-driven security evaluation
SysML
parametric constraints
risk
confidentiality
composability
secrecy
privacy
component-based systems engineering
quantitative evaluation
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
4.1
Papers:
5.5K
Citations:
8.4K
Organization
Cited Papers
ShareSave
ShareSaveCross-contamination of lettuce with Campylobacter spp. via cooking salt during handling raw poultry.png)
PLOS ONE
OAAI
PLOS ONEIF0
OAAIShareSaveShareSave
View more