Operational design for advanced persistent threats
| Autor: | Luka Le Roux, Ciprian Teodorov, Tithnara Nicolas Sun |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
Model checking
021110 strategic defence & security studies Advanced persistent threat Modeling language business.industry Computer science Scale (chemistry) 0211 other engineering and technologies 02 engineering and technology Plan (drawing) Automation Risk analysis (engineering) 0202 electrical engineering electronic engineering information engineering 020201 artificial intelligence & image processing Temporal logic Cyberspace business |
| Zdroj: | MODELS Companion |
| Popis: | The Advanced Persistent Threats (APT) are sophisticated and well-resourced attacks targeting valuable assets. For APTs both the attack and the defense require advanced planning and strategies similar to military operations. The existing cyber-security-aware methodologies achieve valuable results for regular cyber-threats, however they fail to adequately address APTs. The armed forces around the world use the Operational Design methodology to plan actionable strategies for achieving their military objectives. However, this conceptual methodology lacks the tools and the automation needed to scale to the complexity of todays advanced persistent cyber-attacks. In this paper we propose a tool-supported Operational Design-based methodology for cyberspace mission planning. Our approach relies on a structural modeling language, used by the French armed forces, that is extended with behavioral specifications for modeling the operational situation. The APT objectives are captured through temporal logic specifications. The expert is assisted by model-checking tools to perform the typical capacity-based operation design. The approach is illustrated by studying a mission on a water pumping station. After capturing its partial understanding of the system, the attacker formalizes the mission objectives and explores the design space defined around its five operational capabilities. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|