SPTool - Equivalence Checker for SAND Attack Trees

Barbara Kordy 1, 2 Kordy Piotr Van den Boom Yoann
1 INSA Rennes - Institut National des Sciences Appliquées - Rennes
2 EMSEC - EMbedded SEcurity and Cryptography
IRISA-D1 - SYSTÈMES LARGE ÉCHELLE
Abstract : A SAND attack tree is a graphical model decomposing an attack scenario into basic actions to be executed by the attacker. SAND attack trees extend classical attack trees by including the sequential conjunctive operator ( SAND) to the formalism. They thus allow to differentiate actions that need to be executed sequentially from those that can be performed in parallel. Since several structurally different SAND attack trees can represent the same attack scenario, it is important to be able to decide which SAND attack trees are equivalent. SPTool is free, open source software for checking equivalence of SAND attack trees and computing their canonical forms. It relies on term rewriting techniques and an equational theory axiomatizing SAND attack trees.
Keywords : Attack trees sequential operator equivalence rewriting axiomatization canonical form SAND SPTool Maude
Type de document :
Communication dans un congrès
Risks and Security of Internet and Systems - 11th International Conference, CRiSIS 2016, Roscoff, France, September 5-7, 2016, Revised Selected Papers, Sep 2016, Roscoff, France. Springer Risks and Security of Internet and Systems LNCS (10158), pp.105-113, 2017, Risks and Security of Internet and Systems - 11th International Conference, CRiSIS 2016, Roscoff, France, September 5-7, 2016, Revised Selected Papers. 〈https://www.springerprofessional.de/en/sptool-equivalence-checker-for-attack-trees/12103582〉. 〈10.1007/978-3-319-54876-0_8〉
Liste complète des métadonnées
https://hal.inria.fr/hal-01483163
Contributeur : Barbara Kordy <>
Soumis le : samedi 4 mars 2017 - 21:36:47
Dernière modification le : mardi 24 avril 2018 - 13:38:13

Identifiants

Collections

INRIA | IRISA | IRISA-INSA-R | UR1-UFR-ISTIC | UNIV-RENNES

Citation

Barbara Kordy, Kordy Piotr, Van den Boom Yoann. SPTool - Equivalence Checker for SAND Attack Trees. Risks and Security of Internet and Systems - 11th International Conference, CRiSIS 2016, Roscoff, France, September 5-7, 2016, Revised Selected Papers, Sep 2016, Roscoff, France. Springer Risks and Security of Internet and Systems LNCS (10158), pp.105-113, 2017, Risks and Security of Internet and Systems - 11th International Conference, CRiSIS 2016, Roscoff, France, September 5-7, 2016, Revised Selected Papers. 〈https://www.springerprofessional.de/en/sptool-equivalence-checker-for-attack-trees/12103582〉. 〈10.1007/978-3-319-54876-0_8〉. 〈hal-01483163〉

Exporter

BibTeX TEI DC DCterms EndNote

Partager

Métriques

Consultations de la notice

223

Contact


archive-ouverte@inria.fr