Towards a Stochastic Model for Integrated Security and Dependability Evaluation

  • Authors:
  • Karin Sallhammar;Bjarne E. Helvik;Svein J. Knapskog

  • Affiliations:
  • Norwegian University of Science and Technology;Norwegian University of Science and Technology;Norwegian University of Science and Technology

  • Venue:
  • ARES '06 Proceedings of the First International Conference on Availability, Reliability and Security
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present a new approach to integrated security and dependability evaluation, which is based on stochastic modelling techniques. Our proposal aims to provide operational measures of the trustworthiness of a system, regardless if the underlying failure cause is intentional or not. By viewing system states as elements in a stochastic game, we can compute the probabilities of expected attacker behavior, and thereby be able to model attacks as transitions between system states. The proposed game model is based on a rewardand cost concept. A section of the paper is devoted to the demonstration of how the expected attacker behavior is affected by the parameters of the game. Our model opens up for use traditional Markov analysis to make new types of probabilistic predictions for a system, such as its expected time to security failure.