Abstract : Securing automated teller machines (ATMs), as critical and complex infrastructure, requires a precise understanding of the associated threats. This paper reports on the application of attack-defense trees to model and analyze the security of ATMs. We capture the most dangerous multi-stage attack scenarios applicable to ATM structures, and establish a practical experience report, where we reflect on the process of modeling ATM threats via attack-defense trees. In particular, we share our insights into the benefits and drawbacks of attack-defense tree modeling, as well as best practices and lessons learned.
Jennifer Horkoff; Manfred A. Jeusfeld; Anne Persson. 9th IFIP Working Conference on The Practice of Enterprise Modeling (PoEM), Nov 2016, Skövde, Sweden. Springer International Publishing, Lecture Notes in Business Information Processing, LNBIP-267, pp.326-334, 2016, The Practice of Enterprise Modeling 〈10.1007/978-3-319-48393-1_24〉
https://hal.inria.fr/hal-01653513
Contributeur : Hal Ifip
<>
Soumis le : vendredi 1 décembre 2017 - 15:15:11
Dernière modification le : lundi 19 novembre 2018 - 14:28:45
Marlon Fraile, Margaret Ford, Olga Gadyatskaya, Rajesh Kumar, Mariëlle Stoelinga, et al.. Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study. Jennifer Horkoff; Manfred A. Jeusfeld; Anne Persson. 9th IFIP Working Conference on The Practice of Enterprise Modeling (PoEM), Nov 2016, Skövde, Sweden. Springer International Publishing, Lecture Notes in Business Information Processing, LNBIP-267, pp.326-334, 2016, The Practice of Enterprise Modeling 〈10.1007/978-3-319-48393-1_24〉. 〈hal-01653513〉
