Processing multi-parameter attacktrees with estimated parameter values

  • Authors:
  • Aivo Jürgenson;Jan Willemson

  • Affiliations:
  • Tallinn University of Technology, Tallinn, Estonia and Elion Enterprises Ltd., Tallinn, Estonia;Tartu University, Institute of Computer Science, Tartu, Estonia and Cybernetica, Tartu, Estonia

  • Venue:
  • IWSEC'07 Proceedings of the Security 2nd international conference on Advances in information and computer security
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Authors extend the multi-parameter attacktree model to include inaccurate or estimated parameter values, which are modelled as probabilistic interval estimations. The paper develops mathematical tools to extend the computation rules of the attacktree model to work with interval estimations instead of point estimates. We present a sample computation routine and discuss how to interpret the analysis results and how to choose the optimal or an economically justified security level.