Towards a requirements-driven framework for detecting malicious behavior against software systems

  • Authors:
  • Hamzeh Zawawy;Kostas Kontogiannis;John Mylopoulos;Serge Mankovskii

  • Affiliations:
  • University of Waterloo, Waterloo, Canada;Natl. Technical University of Athens, Athens, Greece;University of Toronto, Toronto, Canada;CA Labs, Markham, Canada

  • Venue:
  • Proceedings of the 2011 Conference of the Center for Advanced Studies on Collaborative Research
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Root cause determination for software failures that occurred due to intentional or unintentional third party activities is a difficult and challenging task. In this paper, we propose a new technique for identifying the root causes of system failures stemming from external interventions that is based first, on modeling the conditions by which a system delivers its functionality utilizing goal models, second on modeling the conditions by which system functionality can be compromised utilizing anti-goal models, third representing logged data as well as, goal and anti-goal models as rules and facts in a knowledge base and fourth, utilizing a probabilistic reasoning technique that is based on the use of Markov Logic Networks. The technique is evaluated in a medium size COTS based system and the DARPA 2000 Intrusion Detection data set.