Using SPIN and eclipse for optimized high-level modeling and analysis of computer network attack models

  • Authors:
  • Gerrit Rothmaier;Tobias Kneiphoff;Heiko Krumm

  • Affiliations:
  • Materna GmbH, Dortmund, Germany;Bosch Rexroth AG, Witten, Germany;Universität Dortmund, Dortmund, Germany

  • Venue:
  • SPIN'05 Proceedings of the 12th international conference on Model Checking Software
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Advanced attack sequences combine different kinds of steps (e.g. attacker, protocol, and administration steps) on multiple networked systems. We propose a SPIN based approach for formal modeling and analysis of such scenarios. Our approach is especially suited for scenarios were protocol and network level aspects matter simultaneously. Typical attack sequences and not yet considered variants can be automatically found. The development of scenario models is supported by a modeling framework and the use of the high-level process specification language cTLA. A compiler translates the high-level cTLA models to Promela. This allows the powerful model-checking tool SPIN to be employed for analysis. Through integration of the compiler and SPIN into the Eclipse platform both model development and analysis are facilitated.