Extraction of Insider Attack Scenarios from a Formal Information System Modeling - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Extraction of Insider Attack Scenarios from a Formal Information System Modeling

Résumé

The early detection of potential threats during the modelling phase of a Secure Information System is required because it favours the design of a robust access control policy and the prevention of malicious behaviours during the system execution. This paper deals with internal attacks which can be made by people inside the organization. Such at- tacks are difficult to find because insiders have authorized system access and also may be familiar with system policies and procedures. We are in- terested in finding attacks which conform to the access control policy, but lead to unwanted states. These attacks are favoured by policies involving authorization constraints, which grant or deny access depending on the evolution of the functional Information System state. In this context, we propose to model functional requirements and their Role Based Access Control (RBAC) policies using B machines and then to formally reason on both models. In order to extract insider attack scenarios from these B specifications our approach first investigates symbolic behaviours. The use of a model-checking tool allows to exhibit, from a symbolic behaviour, an observable concrete sequence of operations that can be followed by an attacker. In this paper, we show how this combination of symbolic execution and model-checking allows to find out such insider attack sce- narios.
Fichier principal
Vignette du fichier
llncs.pdf (577.52 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01062812 , version 1 (10-09-2014)

Identifiants

  • HAL Id : hal-01062812 , version 1

Citer

Amira Radhouani, Akram Idani, Yves Ledru, Narjes Ben Rajeb. Extraction of Insider Attack Scenarios from a Formal Information System Modeling. Formal Methods for Security, Jun 2014, Tunis, Tunisia. pp.5-19. ⟨hal-01062812⟩
594 Consultations
406 Téléchargements

Partager

Gmail Facebook X LinkedIn More