<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04370488</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-15T23:52:44+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Dynamic logic-based attack graph for risk assessment in complex computer systems</title>
            <author role="aut">
              <persName>
                <forename type="first">Antoine</forename>
                <surname>Boudermine</surname>
              </persName>
              <email type="md5">b0b05848564b4b8abaeb73a385d927ad</email>
              <email type="domain">naval-group.com</email>
              <idno type="idhal" notation="numeric">1194144</idno>
              <idno type="halauthorid" notation="string">2649004-1194144</idno>
              <idno type="IDREF">https://www.idref.fr/267127529</idno>
              <affiliation ref="#struct-1081156"/>
              <affiliation ref="#struct-121818"/>
              <affiliation ref="#struct-553134"/>
            </author>
            <author role="crp">
              <persName>
                <forename type="first">Rida</forename>
                <surname>Khatoun</surname>
              </persName>
              <email type="md5">604c122d586f9ab493e6e3d234c01669</email>
              <email type="domain">telecom-paristech.fr</email>
              <idno type="idhal" notation="string">khatoun</idno>
              <idno type="idhal" notation="numeric">178793</idno>
              <idno type="halauthorid" notation="string">46179-178793</idno>
              <idno type="IDREF">https://www.idref.fr/138135819</idno>
              <idno type="ORCID">https://orcid.org/0009-0004-8282-136X</idno>
              <affiliation ref="#struct-1081156"/>
              <affiliation ref="#struct-121818"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jean-Henri</forename>
                <surname>Choyer</surname>
              </persName>
              <idno type="halauthorid">2649005-0</idno>
              <affiliation ref="#struct-553134"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Accord Elsevier</forename>
                <surname>CCSD</surname>
              </persName>
              <email type="md5">3cc0cc7b8e3329bfb7423fa2578d788e</email>
              <email type="domain">ccsd.cnrs.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2025-03-31 12:12:36</date>
              <date type="whenModified">2026-02-05 03:24:37</date>
              <date type="whenReleased">2025-03-31 12:12:36</date>
              <date type="whenProduced">2023-06</date>
              <date type="whenEndEmbargoed">2024-03-30</date>
              <ref type="file" target="https://hal.science/hal-04370488v1/document">
                <date notBefore="2024-03-30"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04370488v1/file/S1389128623001755.pdf" id="file-5013474-4343692">
                <date notBefore="2024-03-30"/>
              </ref>
              <ref type="externalLink" target="http://manuscript.elsevier.com/S1389128623001755/pdf/S1389128623001755.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1081876">
                <persName>
                  <forename>Accord Elsevier</forename>
                  <surname>CCSD</surname>
                </persName>
                <email type="md5">3cc0cc7b8e3329bfb7423fa2578d788e</email>
                <email type="domain">ccsd.cnrs.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04370488</idno>
            <idno type="halUri">https://hal.science/hal-04370488</idno>
            <idno type="halBibtex">boudermine:hal-04370488</idno>
            <idno type="halRefHtml">&lt;i&gt;Computer Networks&lt;/i&gt;, 2023, 228, pp.109730. &lt;a target="_blank" href="https://dx.doi.org/10.1016/j.comnet.2023.109730"&gt;&amp;#x27E8;10.1016/j.comnet.2023.109730&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">Computer Networks, 2023, 228, pp.109730. &amp;#x27E8;10.1016/j.comnet.2023.109730&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by-nc/4.0/">CC BY-NC 4.0 - Attribution - Non-commercial use<ref corresp="#file-5013474-4343692"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="ENST">Ecole Nationale Supérieure des Télécommunications</idno>
            <idno type="stamp" n="TELECOM-PARISTECH" corresp="PARISTECH">Télécom Paris</idno>
            <idno type="stamp" n="PARISTECH">ParisTech</idno>
            <idno type="stamp" n="LTCI" corresp="TELECOM-PARISTECH">Laboratoire Traitement et Communication de l'Information</idno>
            <idno type="stamp" n="INFRES" corresp="TELECOM-PARISTECH">Département Informatique et Réseaux</idno>
            <idno type="stamp" n="IP_PARIS">Institut Polytechnique de Paris</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="ELSEVIER">Import Elsevier</idno>
            <idno type="stamp" n="C2" corresp="TELECOM-PARISTECH">Equipe Cybersécurité et Cryptographie </idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
            <idno type="stamp" n="DEPARTEMENT-DE-MATHEMATIQUES">Collection du Département de Mathématiques</idno>
            <idno type="stamp" n="IP-PARIS-DEPARTEMENT-MATHEMATIQUES">Département de Mathèmatiques</idno>
            <idno type="stamp" n="IP-PARIS-MATHEMATIQUES">IP Paris Département de Mathématiques</idno>
            <idno type="stamp" n="IP-PARIS-INFORMATION-COMMUNICATION-ELECTRONIQUE">IP Paris Département d'Information, de Communication et d'Électronique</idno>
            <idno type="stamp" n="IP-PARIS-INFORMATIQUE-DONNEES-ET-IA">IP Paris Département d'Informatique, de Données et d'IA</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Dynamic logic-based attack graph for risk assessment in complex computer systems</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Antoine</forename>
                    <surname>Boudermine</surname>
                  </persName>
                  <email type="md5">b0b05848564b4b8abaeb73a385d927ad</email>
                  <email type="domain">naval-group.com</email>
                  <idno type="idhal" notation="numeric">1194144</idno>
                  <idno type="halauthorid" notation="string">2649004-1194144</idno>
                  <idno type="IDREF">https://www.idref.fr/267127529</idno>
                  <affiliation ref="#struct-1081156"/>
                  <affiliation ref="#struct-121818"/>
                  <affiliation ref="#struct-553134"/>
                </author>
                <author role="crp">
                  <persName>
                    <forename type="first">Rida</forename>
                    <surname>Khatoun</surname>
                  </persName>
                  <email type="md5">604c122d586f9ab493e6e3d234c01669</email>
                  <email type="domain">telecom-paristech.fr</email>
                  <idno type="idhal" notation="string">khatoun</idno>
                  <idno type="idhal" notation="numeric">178793</idno>
                  <idno type="halauthorid" notation="string">46179-178793</idno>
                  <idno type="IDREF">https://www.idref.fr/138135819</idno>
                  <idno type="ORCID">https://orcid.org/0009-0004-8282-136X</idno>
                  <affiliation ref="#struct-1081156"/>
                  <affiliation ref="#struct-121818"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jean-Henri</forename>
                    <surname>Choyer</surname>
                  </persName>
                  <idno type="halauthorid">2649005-0</idno>
                  <affiliation ref="#struct-553134"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">12029</idno>
                <idno type="issn">1389-1286</idno>
                <idno type="eissn">1872-7069</idno>
                <title level="j">Computer Networks</title>
                <imprint>
                  <publisher>Elsevier</publisher>
                  <biblScope unit="volume">228</biblScope>
                  <biblScope unit="pp">109730</biblScope>
                  <date type="datePub">2023-06</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1016/j.comnet.2023.109730</idno>
              <idno type="pii">S1389-1286(23)00175-5</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Dynamic attack graph</term>
                <term xml:lang="en">Simulation</term>
                <term xml:lang="en">Attack graph</term>
                <term xml:lang="en">Dynamic system</term>
                <term xml:lang="en">Network security</term>
                <term xml:lang="en">Risk assessment</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Nowadays, Information and Communication Technologies (ICT) play a significant role in our modern daily life. Computer networks breakdown can strongly impact everything in our life such as personal data, industrials, banks, oil pipelines, hospitals, nuclear reactors, military platforms, etc. Assessing their security is a necessity to reduce the risk of compromise by an attacker. Nevertheless, the actual solutions are rarely adapted to the high complexity of modern computer systems. They often rely on too much human work and the used algorithms do not scale well. Furthermore, the evolution of the system over time is rarely modeled and is therefore not considered in the evaluation of its security. This paper proposes a dynamic attack graph generation method allowing to model attack paths by considering the evolution of the system over time. We compute the probabilities of compromise of the system components by simulating several cyberattacks from the previously constructed dynamic attack graph. We tested our solution on a use case of several thousand of machines. The measured results demonstrate its ability to assess the threat in complex systems caused by combining exploitation of successive vulnerabilities.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-1081156" status="VALID">
          <orgName>Cybersécurité et Cryptographie</orgName>
          <orgName type="acronym">C2</orgName>
          <date type="start">2021-10-07</date>
          <desc>
            <address>
              <addrLine>Télécom Paris 19 Place Marguerite Perey 91120 PALAISEAU. Fusion de: CCN, Cybersecurity for Communication and Networking et de MC2, Mathématiques discrètes, Codage et Cryptographie</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr/fr/recherche/laboratoires/laboratoire-traitement-et-communication-de-linformation-ltci/les-equipes-de-recherche/cybersecurite-cryptographie-c2</ref>
          </desc>
          <listRelation>
            <relation name="484335" active="#struct-484335" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation active="#struct-1048346" type="indirect"/>
            <relation active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="department" xml:id="struct-121818" status="VALID">
          <orgName>Département Informatique et Réseaux</orgName>
          <orgName type="acronym">INFRES</orgName>
          <desc>
            <address>
              <addrLine>46, rue Barrault 75013 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr/fr/recherche/laboratoires/laboratoire-traitement-et-communication-de-linformation-ltci/les-departements-denseignement-et-recherche</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300362" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-553134" status="VALID">
          <orgName>Naval Group</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.naval-group.com/fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-484335" status="VALID">
          <idno type="IdRef">162384270</idno>
          <idno type="ISNI">0000 0000 9194 9502</idno>
          <idno type="RNSR">200319327Z</idno>
          <idno type="ROR">https://ror.org/057er4c39</idno>
          <orgName>Laboratoire Traitement et Communication de l'Information</orgName>
          <orgName type="acronym">LTCI</orgName>
          <date type="start">2017-01-01</date>
          <desc>
            <address>
              <addrLine>Télécom Paris 19 Place Marguerite Perey 91120 PALAISEAU</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr/fr/recherche/laboratoires/laboratoire-traitement-et-communication-de-linformation-ltci</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
            <relation active="#struct-1048346" type="direct"/>
            <relation active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-1048346" status="VALID">
          <idno type="IdRef">026375273</idno>
          <idno type="ISNI">0000 0001 2108 2779</idno>
          <idno type="ROR">https://ror.org/01naq7912</idno>
          <orgName>Télécom Paris</orgName>
          <date type="start">2019-06-12</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
            <relation active="#struct-563936" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-563936" status="VALID">
          <idno type="IdRef">238327159</idno>
          <idno type="ISNI">0000000502717600</idno>
          <idno type="ROR">https://ror.org/042tfbd02</idno>
          <idno type="Wikidata">Q48759778</idno>
          <orgName>Institut Polytechnique de Paris</orgName>
          <orgName type="acronym">IP Paris</orgName>
          <date type="start">2019-06-02</date>
          <desc>
            <address>
              <addrLine>Route de Saclay, 91120 Palaiseau Cedex, France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ip-paris.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300362" status="VALID">
          <idno type="ROR">https://ror.org/01naq7912</idno>
          <orgName>Télécom ParisTech</orgName>
          <date type="start">2008-01-01</date>
          <date type="end">2019-06-11</date>
          <desc>
            <address>
              <addrLine>46 rue Barrault 75634 Paris Cedex 13</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.telecom-paris.fr</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>