Model the System from Adversary Viewpoint: Threats Identification & Modeling - Télécom Paris
Communication Dans Un Congrès Année : 2014

Model the System from Adversary Viewpoint: Threats Identification & Modeling

Résumé

Security attacks are hard to understand, often expressed with unfriendly and limited details, making it difficult for security experts and for security analysts to create intelligible security specifications. For instance, to explain ”Why” (attack objective), ”What” (i.e., system as- sets, goals, etc.), and ”How” (attack method), adversary achieved his at- tack goals. We introduce in this paper a security attack meta-model for our SysML-Sec framework [17], developed to improve the threat identification and modeling through the explicit representation of security concerns with knowledge representation techniques. Our proposed meta- model enables the specification of these concerns through ontological concepts which define the semantics of the security artifacts and introduced using SysML-Sec diagrams. This meta-model also enables representing the relationships that tie several such concepts together. This representation is then used for reasoning about the knowledge introduced by system designers as well as security experts through the graphical environment of the SysML-Sec framework.
Fichier non déposé

Dates et versions

hal-02286972 , version 1 (13-09-2019)

Identifiants

  • HAL Id : hal-02286972 , version 1

Citer

Muhammad Sabir Idrees, Yves Roudier, Ludovic Apvrille. Model the System from Adversary Viewpoint: Threats Identification & Modeling. AIDP workshop, IFIP-SEC conference, Jun 2014, Marrakech, Morocco. ⟨hal-02286972⟩
80 Consultations
0 Téléchargements

Partager

More