Security Enforcement in IoT Systems using Attack Trees

Delphine Beaulaton (1) , Najah Ben Said (2, 1) , Ioana Cristescu (1) , Axel Legay (3) , Jean Quilbeuf (1)

1 TAMIS - Threat Analysis and Mitigation for Information Security
2 VERIMAG - IMAG - VERIMAG
3 Inria Rennes – Bretagne Atlantique

Attack trees are graphical representations of the different scenarios that can lead to a security failure. In this paper we propose a security-based framework for modeling IoT systems where attack trees are defined alongside the model to detect and prevent security risks in the system. A successful attack can be a rare event in the execution of a well designed system. When rare, such attacks are hard to detect with usual model checking techniques. Hence, we use importance splitting as a statistical model checking technique for rare events.

Domaines: Théorie et langage formel [cs.FL]; Cryptographie et sécurité [cs.CR]; Langage de programmation [cs.PL]

Delphine Beaulaton, Najah Ben Said, Ioana Cristescu, Axel Legay, Jean Quilbeuf. Security Enforcement in IoT Systems using Attack Trees. 2018. ⟨hal-01962089⟩