Parametric Analyses of Attack-fault Trees - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Fundamenta Informaticae Année : 2021

Parametric Analyses of Attack-fault Trees

Résumé

Risk assessment of cyber-physical systems, such as power plants, connected devices and IT-infrastructures has always been challenging: safety (i.e., absence of unintentional failures) and security (i.e., no disruptions due to attackers) are conditions that must be guaranteed. One of the traditional tools used to consider these problems is attack trees, a treebased formalism inspired by fault trees, a well-known formalism used in safety engineering. In this paper we define and implement the translation of attack-fault trees (AFTs) to a new extension of timed automata, called parametric weighted timed automata. This allows us to parameterize constants such as time and discrete costs in an AFT and then, using the model-checker IMITATOR, to compute the set of parameter values such that a successful attack is possible. Moreover, we add the possibility to define countermeasures. Using the different sets of parameter values computed, different attack and fault scenarios can be deduced depending on the budget, time or computation power of the attacker, providing helpful data to select the most efficient countermeasure .
Fichier principal
Vignette du fichier
figuide.pdf (1.9 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03483440 , version 1 (16-12-2021)

Identifiants

Citer

Étienne André, Didier Lime, Mathias Ramparison, Mariëlle Stoelinga. Parametric Analyses of Attack-fault Trees. Fundamenta Informaticae, 2021, 182 (1), pp.69 - 94. ⟨10.3233/fi-2021-2066⟩. ⟨hal-03483440⟩
72 Consultations
211 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More