Attack Trees with Sequential Conjunction

Barbara Kordy 1, 2 Ravi Jhawar 3 Sjouke Mauw 3 Sasa Radomirovic 4 Roland Trujillo-Rasua 3
1 EMSEC - EMbedded SEcurity and Cryptography
IRISA-D1 - SYSTÈMES LARGE ÉCHELLE
2 CELTIQUE - Software certification with semantic analysis
Inria Rennes – Bretagne Atlantique , IRISA-D4 - LANGAGE ET GÉNIE LOGICIEL
3 SnT - Interdisciplinary Centre for Security, Reliability and Trust [Luxembourg]
4 ETH Zurich - Department of Computer Science
Abstract : We provide the first formal foundation of SAND attack trees which are a popular extension of the well-known attack trees. The SAND attack tree formalism increases the expressivity of attack trees by introducing the sequential conjunctive operator SAND. This operator enables the modeling of ordered events. We give a semantics to SAND attack trees by interpreting them as sets of series-parallel graphs and propose a complete axiomatization of this semantics. We define normal forms for SAND attack trees and a term rewriting system which allows identification of semantically equivalent trees. Finally, we formalize how to quantitatively analyze SAND attack trees using attributes.
Type de document :
Communication dans un congrès
Hannes Federrath; Dieter Gollmann. 30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. Springer, IFIP Advances in Information and Communication Technology, AICT-455, pp.339-353, 2015, ICT Systems Security and Privacy Protection. 〈https://ifipsec.org/2015/〉. 〈10.1007/978-3-319-18467-8_23〉
Liste complète des métadonnées

Littérature citée [22 références]  Voir  Masquer  Télécharger
https://hal.inria.fr/hal-01197256
Contributeur : Barbara Kordy <>
Soumis le : mercredi 13 juillet 2016 - 14:55:34
Dernière modification le : mercredi 11 avril 2018 - 01:51:19

Fichier

337885_1_En_23_Chapter.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

Collections

INRIA | IRISA | IFIP | IFIP-AICT | IFIP-AICT-455 | IFIP-SEC | IFIP-TC | IFIP-TC11 | IRISA-INSA-R | UR1-UFR-ISTIC | CENTRALESUPELEC | UNIV-RENNES | INRIA-RENGRE

Citation

Barbara Kordy, Ravi Jhawar, Sjouke Mauw, Sasa Radomirovic, Roland Trujillo-Rasua. Attack Trees with Sequential Conjunction. Hannes Federrath; Dieter Gollmann. 30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. Springer, IFIP Advances in Information and Communication Technology, AICT-455, pp.339-353, 2015, ICT Systems Security and Privacy Protection. 〈https://ifipsec.org/2015/〉. 〈10.1007/978-3-319-18467-8_23〉. 〈hal-01197256〉

Exporter

BibTeX TEI DC DCterms EndNote

Partager

Métriques

Consultations de la notice

359

Téléchargements de fichiers

15

Contact


archive-ouverte@inria.fr