Security protocol testing using attack trees - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès CSE '09 : 12th IEEE International Conference on Computational Science and Engineering Année : 2009

Security protocol testing using attack trees

Résumé

In this paper we present an attack injection approach for security protocol testing aiming at vulnerability detection. We use attack tree model to describe known attacks and derive injection test scenarios to test the security properties of the protocol under evaluation. The test scenarios are converted to a specific fault injector script after performing some transformations. The attacker is emulated using a fault injector. This model based approach facilitates there usability and maintainability of the generated injection attacks as well as the generation of fault injectors scripts. The approach is applied to an existing mobile security protocol. We performed experiments with truncation and DoS attacks; results show good precision and efficiency in the injection method
Fichier non déposé

Dates et versions

hal-00446770 , version 1 (13-01-2010)

Identifiants

Citer

Morais Anderson, Ana Rosa Cavalli, Eliane Martins, Willy Ronald Jimenez Freitez. Security protocol testing using attack trees. CSE '09 : 12th IEEE International Conference on Computational Science and Engineering, Aug 2009, Vancouver, Canada. pp.690-697, ⟨10.1109/CSE.2009.206⟩. ⟨hal-00446770⟩
63 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More