Mitigating Security Risks through Attack Strategies Exploration

Braham Lotfi Mediouni (1) , Ayoub Nouri (1) , Marius Bozga (1) , Axel Legay (2) , Saddek Bensalem (1)

1 VERIMAG - IMAG - VERIMAG
2 Inria Rennes – Bretagne Atlantique

Security assessment of organization's information systems is becoming increasingly complex due to their growing sizes and underlying architectures, e.g., cloud. Analyzing potential attacks is a pragmatic approach that provides insightful information to achieve this purpose. In this work, we propose to synthesize defense configurations to counter sophisticated attack strategies minimizing resource usage while ensuring a high probability of success. For this, we combine Statistical Model Checking techniques with Genetic Algorithms. Experiments performed on real-life case studies show substantial improvements compared to existing techniques.

Domaines: Systèmes embarqués

Braham Lotfi Mediouni, Ayoub Nouri, Marius Bozga, Axel Legay, Saddek Bensalem. Mitigating Security Risks through Attack Strategies Exploration. ISoLA 2018 - 8th International Symposium On Leveraging Applications of Formal Methods, Verification and Validation, Nov 2018, Limassol, Cyprus. pp.392-413, ⟨10.1007/978-3-030-03421-4_25⟩. ⟨hal-01896590v2⟩