Attack and defense modeling with BDMP

Authors:
Ludovic Piètre-Cambacédès;Marc Bouissou
Affiliations:
Electricité de France R&D, Clamart, France and Institut Telecom, Telecom ParisTech, Paris, France;Electricité de France R&D, Clamart, France and Ecole Centrale Paris, Châtenay-Malabry, France
Venue:
MMM-ACNS'10 Proceedings of the 5th international conference on Mathematical methods, models and architectures for computer network security
Year:
2010

Citing 8
Cited 0

A Quantitative Model of the Security Intrusion Process Based on Attacker Behavior

IEEE Transactions on Software Engineering
Attack net penetration testing

Proceedings of the 2000 workshop on New security paradigms
Automated Generation and Analysis of Attack Graphs

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
Model-Based Evaluation: From Dependability to Security

IEEE Transactions on Dependable and Secure Computing
Disentangling the relations between safety and security

AIC'09 Proceedings of the 9th WSEAS international conference on Applied informatics and communications
Beyond Attack Trees: Dynamic Security Modeling with Boolean Logic Driven Markov Processes (BDMP)

EDCC '10 Proceedings of the 2010 European Dependable Computing Conference
Foundations of attack trees

ICISC'05 Proceedings of the 8th international conference on Information Security and Cryptology
Quantitatively assessing the vulnerability of critical information systems: A new method for evaluating security enhancements

International Journal of Information Management: The Journal for Information Professionals

Quantified Score

Hi-index	0.00

Visualization

Abstract

The BDMP (Boolean logic Driven Markov Processes) modeling formalism has recently been adapted from reliability engineering to security modeling. It constitutes an attractive trade-off in terms of readability, modeling power, scalability and quantification capabilities. This paper develops and completes the theoretical foundations of such an adaptation and presents new developments on defensive aspects. In particular, detection and reaction modeling are fully integrated in an augmented theoretical framework. Different use-cases and quantification examples illustrate the relevance of the overall approach.