Modeling the Stuxnet attack with BDMP: Towards more formal risk assessments - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

Modeling the Stuxnet attack with BDMP: Towards more formal risk assessments

Siwar Mneja Kriaa
EDF
Ludovic Pietre-Cambacedes
  • Fonction : Auteur

Résumé

Attack modeling has recently been adopted by security analysts as a useful tool in risk assessment of cyber-physical systems. We propose in this paper to model the Stuxnet attack with BDMP (Boolean logic Driven Markov Processes) formalism and to show the advantages of such modeling. After a description of the architecture targeted by Stuxnet, we explain the steps of the attack and model them formally with a BDMP. Based on estimated values of the success probabilities and rates of the elementary attack steps, we give a quantification of the main possible sequences leading to the physical destruction of the targeted industrial facility. This example completes a series of papers on BDMP applied to security by modeling a real case study. It highlights the advantages of BDMP compared to attack trees often used in security assessment.
Fichier non déposé

Dates et versions

hal-01222960 , version 1 (31-10-2015)

Identifiants

Citer

Siwar Mneja Kriaa, Marc Bouissou, Ludovic Pietre-Cambacedes. Modeling the Stuxnet attack with BDMP: Towards more formal risk assessments. Risk and Security of Internet and Systems (CRiSIS), 2012 7th International Conference on, Oct 2012, Cork, Ireland. ⟨10.1109/CRISIS.2012.6378942⟩. ⟨hal-01222960⟩
115 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More