Implementing the ADVISE security modeling formalism in Möbius

Abstract

The ADversary VIew Security Evaluation (ADVISE) model formalism provides a system security model from the perspective of an adversary. An ADVISE atomic model consists of an attack execution graph (AEG) composed of attack steps, system state variables, and attack goals, as well as an adversary profile that defines the abilities and interests of a particular adversary. The ADVISE formalism has been implemented as a Möbius atomic model formalism in order to leverage the existing set of mature modeling formalisms and solution techniques offered by Möbius. This tool paper explains the ADVISE implementation in Möbius and provides technical details for Möbius users who want to use ADVISE either alone or in combination with other modeling formalisms provided by Möbius.

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

“…The calculated metrics are time to compromise, the probability of taking a certain path, and the probability of being in a certain attack step. Ford et al [260] present a tool that implements this approach (called ADVISE) in the Möbius Eclipse tool.…”

Model-Based Evaluation of the Resilience of Critical Infrastructures Under Cyber Attacks

“…In [6] we extended the PIA method by adding an Adversary model and building on the recent work by others in this direction, e.g. the ADVISE formalism [4]. The focus of this paper is to study the impact on network service of different attack strategies -where such strategies might be employed by naïve or more sophisticated attackers -and to highlight the effectiveness of some precautionary measures that a network operator could undertake.…”

Quantification of the Impact of Cyber Attack in Critical Infrastructures

“…We propose to extend the PIA method by adding an Adversary model and building on the recent work by others in this direction, e.g. the ADVISE formalism [4].…”