Modelling Duqu 2.0 Malware using Attack Trees with Sequential Conjunction
@inproceedings{Maynard2016ModellingD2,
title={Modelling Duqu 2.0 Malware using Attack Trees with Sequential Conjunction},
author={P. Maynard and K. McLaughlin and S. Sezer},
booktitle={ICISSP},
year={2016}
}In this paper we identify requirements for choosing a threat modelling formalisation for modelling sophisticated malware such as Duqu 2.0. We discuss the gaps in current formalisations and propose the use of Attack Trees with Sequential Conjunction when it comes to analysing complex attacks. The paper models Duqu 2.0 based on the latest information sourced from formal and informal sources. This paper provides a well structured model which can be used for future analysis of Duqu 2.0 and related… CONTINUE READING
6 Citations
Models of Reliability of Fault-Tolerant Software Under Cyber-Attacks
- Computer Science
- 2017 IEEE 28th International Symposium on Software Reliability Engineering (ISSRE)
- 2017
- 6
- PDF
Interplay Between Malware Epidemics and Honeynet Potency in Industrial Control System Network
- Computer Science
- IEEE Access
- 2020
A propagation model with defensive measures for PLC-PC worms in industrial networks
- Computer Science
- 2019
- 5
Big Fish, Little Fish, Critical Infrastructure: An Analysis of Phineas Fisher and the ‘Hacktivist’ Threat to Critical Infrastructure
- Computer Science, Business
- 2020 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA)
- 2020
Quantitative Evaluation of the Efficacy of Defence-in-Depth in Critical Infrastructures
- Computer Science
- Resilience of Cyber-Physical Systems
- 2019
Resilience of Cyber-Physical Systems
- Computer Science
- Advanced Sciences and Technologies for Security Applications
- 2019
- 6
- Highly Influenced
References
SHOWING 1-10 OF 16 REFERENCES
Security Modeling with BDMP: From Theory to Implementation
- Computer Science
- 2011 Conference on Network and Information Systems Security
- 2011
- 17
Towards Synthesis of Attack Trees for Supporting Computer-Aided Risk Analysis
- Engineering, Computer Science
- SEFM Workshops
- 2014
- 20
- PDF
Modeling the Stuxnet attack with BDMP: Towards more formal risk assessments
- Computer Science
- 2012 7th International Conference on Risks and Security of Internet and Systems (CRiSIS)
- 2012
- 52
- Highly Influential
Modeling cyber-attack for SCADA systems using CoPNet approach
- Computer Science
- 2012 IEEE International Conference on Complex Systems (ICCS)
- 2012
- 9
A new formalism that combines advantages of fault-trees and Markov models: Boolean logic driven Markov processes
- Computer Science
- Reliab. Eng. Syst. Saf.
- 2003
- 223