A Role Modeling Based Approach for Cyber Threat Analysis - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

A Role Modeling Based Approach for Cyber Threat Analysis

Bastien Drouot
Fahad R. Golra
Joël Champeau

Résumé

Using DSMLs, the domain experts can express their models in a language that is relevant to the problem area. However, it also adds the complexity of interoperability between these languages, specially for application areas that encompass multiple domains. One such application area, Cyber Threat Analysis (CTA), is at the intersection of various domains that can evolve independently: system modeling, attacker modeling and threat description. In this paper, we present an approach to address CTA interoperability issues based on role modeling. The proposed language provides a mechanism to define shared semantics between DSMLs relative to the CTA. The concept of a role is central to our approach, presented as Role4All framework. These roles allow us to federate different DSMLs to generate an attacker’s viewpoint. Our approach is illustrated using a case study on the development of an attacker’s viewpoint based on the federation of multiple domain models. Interoperability between the domain models is crucial to apply dedicated algorithms and interpretations on the attacker’s viewpoint. We used this attacker viewpoint to simulate attacks on a system for security analysis.
Fichier non déposé

Dates et versions

hal-02461502 , version 1 (30-01-2020)

Identifiants

Citer

Bastien Drouot, Fahad R. Golra, Joël Champeau. A Role Modeling Based Approach for Cyber Threat Analysis. MODELSWARD 2019 - 7th International Conference on Model-Driven Engineering and Software Development, Feb 2019, Prague, Czech Republic. pp.76-100, ⟨10.1007/978-3-030-37873-8_4⟩. ⟨hal-02461502⟩
44 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More