Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study

Marlon Fraile
  • Fonction : Auteur
GMV
Margaret Ford
  • Fonction : Auteur
Rajesh Kumar
Mariëlle Stoelinga

Résumé

Securing automated teller machines (ATMs), as critical and complex infrastructure, requires a precise understanding of the associated threats. This paper reports on the application of attack-defense trees to model and analyze the security of ATMs. We capture the most dangerous multi-stage attack scenarios applicable to ATM structures, and establish a practical experience report, where we reflect on the process of modeling ATM threats via attack-defense trees. In particular, we share our insights into the benefits and drawbacks of attack-defense tree modeling, as well as best practices and lessons learned.
Fichier principal
Vignette du fichier
416579_1_En_24_Chapter.pdf (206.53 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01653513 , version 1 (01-12-2017)

Licence

Paternité

Identifiants

Citer

Marlon Fraile, Margaret Ford, Olga Gadyatskaya, Rajesh Kumar, Mariëlle Stoelinga, et al.. Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study. 9th IFIP Working Conference on The Practice of Enterprise Modeling (PoEM), Nov 2016, Skövde, Sweden. pp.326-334, ⟨10.1007/978-3-319-48393-1_24⟩. ⟨hal-01653513⟩
377 Consultations
278 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More