Towards a Formalisation of Expert’s Knowledge for an Automatic Construction of a Vulnerability Model of a Cyberphysical System

Witold Klaudel (1) , Artur Rataj (1)

1 IRT SystemX

We present a method for a quantitative formulation of the knowledge of security experts, to be used in an evaluation of attack costs in a cyberphysical system. In order to make the formulation practical, we classify the attacker forms and its attack positions. Applying boiler-plate patterns, like that of an operating system, is also possible. The obtained cost model may allow an exhaustive analysis of hypothetical weaknesses, employed in the design phase of a critical system.

Mots clés: Security modelling; cyberphysical system; attack graph; graph algorithm; probability

Domaines: Cryptographie et sécurité [cs.CR]

Witold Klaudel, Artur Rataj. Towards a Formalisation of Expert’s Knowledge for an Automatic Construction of a Vulnerability Model of a Cyberphysical System. ICISSP 2021 - 7th International Conference on Information Systems Security and Privacy, Feb 2021, Vienne, Austria. ⟨hal-03087160⟩