Is my attack tree correct? Extended version

2017/06/26 by Maxime Audinot, Audinot, Maxime, Sophie Pinchinat +3 · 1 citation
Computer Science · #Advanced Malware Detection Techniques #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Information and Cyber Security #Network Security and Intrusion Detection

paper · pdf · doi:10.48550/arxiv.1706.08507

openalex publication_date 2017/06/26 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

Attack trees are a popular way to represent and evaluate potential security threats on systems or infrastructures. The goal of this work is to provide a framework allowing to express and check whether an attack tree is consistent with the analyzed system. We model real systems using transition systems and introduce attack trees with formally specified node labels. We formulate the correctness properties of an attack tree with respect to a system and study the complexity of the corresponding decision problems. The proposed framework can be used in practice to assist security experts in manual creation of attack trees and enhance development of tools for automated generation of attack trees.

Cited by

• An ontological lens on attack trees: Toward adequacy and interoperability

Related

• On Validating Attack Trees with Attack Effects: An Approach from Barwise-Seligman's Channel Theory
• Automated generation of attack trees with optimal shape and labelling
• A Novel Approach for Attack Tree to Attack Graph Transformation: Extended Version
• Quantitative Questions on Attack-Defense Trees
• A Survey of Automatic Generation of Attack Trees and Attack Graphs