.png){kind=icon}
.png){kind=icon}
Return
Security Countermeasures Selection Using the Meta Attack Language and Probabilistic Attack Graphs
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2022.3200601.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Connecting critical infrastructure assets to the network is absolutely essential for modern industries. In contrast to the apparent advantages, network connectivity exposes other infrastructure vulnerabilities that can be exploited by attackers. To protect the infrastructure, precise countermeasure identification is necessary. In this regard, the objective for the security officers is to identify the optimal set of countermeasures under a variety of budgetary restrictions. Our approach is based on the Meta Attack Language framework, which allows for convenient modelling of said infrastructures, as well as for automatic generation of attack graphs describing attacks against them. We formalize the problem of the selection of countermeasures in this context. The formalization makes it possible to deal with an arbitrary number of budgets, expressing available resources of both monetary and time-like nature, and to model numerous dependencies between countermeasures, including order dependencies, mutual exclusivity, and interdependent implementation costs. We propose a flexible and scalable algorithm for the problem. The whole methodology is validated in practice on realistic models.
Keywords:
Security
DSL
Costs
Analytical models
Optimization
Computational modeling
Stochastic processes
Risk assessment
Threat modeling
Attack graphs
attack simulations
countermeasure selection
graphical security modeling
threat modeling