Dimensions of Active Behaviour

Paton, Norman W.; Díaz, Óscar; Williams, M. Howard; Campin, Jack; Dinn, Andrew; Jaime, Arturo

doi:10.1007/978-1-4471-3225-7_3

Cited by 41 publications

(13 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Figure 3 shows the attack pattern representation for this attack scenario. For the second sub-step of the refinement, we make the use of the event-condition-action (ECA) rule, proposed initially to represent active databases [6]. The ECA rule is used to represent the attack pattern elements of Figure 3 into a sequence of steps that must be carried out by the tool.…”

Section: Refine the Attacks Scenariosmentioning

confidence: 99%

See 1 more Smart Citation

A model-based attack injection approach for security validation

Morais

Cavalli

Martins

2011

Proceedings of the 4th International Conference on Security of Information and Networks

View full text Add to dashboard Cite

International audienceCommunication systems are inherently buggy. These flaws can lead to security breaches in applications, which a malicious user could exploit to cause security failures in the system and, under certain circumstances, to take complete control of the vulnerable system. In this paper, we introduce a novel attack injection approach based on attack modeling to perform security testing and detect potential security vulnerabilities. We use attack trees to describe the system flaws and derive corresponding attack scenarios. The attack scenarios are refined to executable scripts for testing tools that are in charge of injecting the attacks against the system. The approach is applied to the Wireless Application Protocol (WAP) currently used in low-tier mobile devices. We carried out experiments using real attacks such as Denial of Service (DoS) and Cipher Suite Rollback attacks. The experimental results show that the approach can achieve high efficiency in the role of uncovering vulnerabilities

show abstract

Section: Refine the Attacks Scenariosmentioning

confidence: 99%

“…Copyright 2011 ACM 978-1-4503-1020-8/11/11...$10.00. pattern [5], event-condition-action (ECA) rules [6], and UML elements, and then converted to executable attack scripts for the testing tools. Experiments were performed using real attacks of the protocol such as Cipher Suite Rollback attack and Denial of Service (DoS) attacks.…”

Section: Introductionmentioning

confidence: 99%

A model-based attack injection approach for security validation

Morais

Cavalli

Martins

2011

Proceedings of the 4th International Conference on Security of Information and Networks

View full text Add to dashboard Cite

show abstract

“…We proposed the use of active rules [13] to convert the attack pattern elements into a notation that represent the sequence that must be carried out by the fault injector. Active rules are of the form: <trigger, condition, action>.…”

Section: • Step 5: Refine Attacks Scenariosmentioning

confidence: 99%

Security Protocol Testing Using Attack Trees

Morais

Martins²,

Cavalli³

et al. 2009

2009 International Conference on Computational Science and Engineering

View full text Add to dashboard Cite

In this paper we present an attack injection approach for security protocol testing aiming at vulnerability detection. We use attack tree model to describe known attacks and derive injection test scenarios to test the security properties of the protocol under evaluation. The test scenarios are converted to a specific fault injector script after performing some transformations. The attacker is emulated using a fault injector. This model based approach facilitates the reusability and maintainability of the generated injection attacks as well as the generation of fault injectors scripts. The approach is applied to an existing mobile security protocol. We performed experiments with truncation and DoS attacks; results show good precision and efficiency in the injection method.

show abstract

“…We will not elaborate further on the behavioral dimensions of ECA triggers [PDW+93] such as coupling modes, conflict resolution, etc. We consider a simple ECA trigger execution model (as shown in [WC96b], p. 17).…”

Section: Execution Modelmentioning

confidence: 99%

“…In [BW97a], we have introduced the concept of fuzzy event and proposed a trigger model dealing with it. Another important issue to study is the inter-relationship between the proposed fuzzy concepts and other behavioral dimensions of active database systems [PDW+93] like coupling modes, termination, etc.…”

Section: Future Workmentioning

confidence: 99%

Fuzzy triggers: incorporating imprecise reasoning into active databases

Wolski

Bouaziz

Proceedings 14th International Conference on Data Engineering

View full text Add to dashboard Cite

Traditional Event-Condition-Action triggers (active database rules) include a Boolean predicate as a trigger condition. We propose fuzzy triggers whereby fuzzy inference is utilized in the condition evaluation. This way, approximate reasoning may be integrated with a traditional crisp database. The new approach paves the way for intuitive expression of application semantics of imprecise nature, in database-bound applications. Two fuzzy triggers models are proposed. Firstly, a set of fuzzy rules is encapsulated into a Boolean-valued function called a rule set function, leading to the C-fuzzy trigger model. Subsequently, actions are expressed also in fuzzy terms, and the corresponding CA-fuzzy trigger model is proposed. Examples are provided to illustrate how fuzzy triggers can be applied to a real-life drive control system in an industrial installation.

show abstract

Dimensions of Active Behaviour

Cited by 41 publications

References 13 publications

A model-based attack injection approach for security validation

A model-based attack injection approach for security validation

Security Protocol Testing Using Attack Trees

Fuzzy triggers: incorporating imprecise reasoning into active databases

Contact Info

Product

Resources

About