Mitigating Security Risks through Attack Strategies Exploration

Mediouni, Braham;Nouri, Ayoub;Bozga, Marius;Legay, Axel;Bensalem, Saddek
(2018) ISoLA 2018 - 8th International Symposium On Leveraging Applications of Formal Methods, Verification and Validation (5.November.2018)

Files

No attached file found for this publication.

Details

Authors
  • Mediouni, Braham
    Author
  • Nouri, Ayoub
    Author
  • Bozga, Marius
    Author
  • Legay, AxelUCLouvain
    Author
  • Bensalem, Saddek
    Author
Abstract
Security assessment of organization's information systems is becoming increasingly complex due to their growing sizes and underlying architectures, e.g., cloud. Analyzing potential attacks is a pragmatic approach that provides insightful information to achieve this purpose. In this work, we propose to synthesize defense configurations to counter sophisticated attack strategies minimizing resource usage while ensuring a high probability of success. For this, we combine Statistical Model Checking techniques with Genetic Algorithms. Experiments performed on real-life case studies show substantial improvements compared to existing techniques.
Affiliations

Citations

Mediouni, B., Nouri, A., Bozga, M., Legay, A., & Bensalem, S. (2018). Mitigating Security Risks through Attack Strategies Exploration. ISoLA 2018 - 8th International Symposium On Leveraging Applications of Formal Methods, Verification and Validation. https://hdl.handle.net/2078.5/225523