Synthesis of Optimal Defenses for System Architecture Design Model in MaxSMT

Meng, Baoluo; Viswanathan, Arjun; Smith, William; Moitra, Abha; Siu, Kit; Durling, Michael

doi:10.1007/978-3-031-06773-0_40

Cited by 3 publications

(1 citation statement)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This work is an extended version of the the NFM conference paper[3]. Our extension includes the ADTree construction algorithms, the proofs of correctness of our techniques, and a more elaborate use case and related work.…”

mentioning

confidence: 99%

Attack-Defense Tree-based Security Analysis and Optimal Defense Synthesis for System Design

Meng

Viswanathan

Saswata

et al. 2023

Preprint

Self Cite

View full text Add to dashboard Cite

Attack-Defense Trees (ADTrees) are widely used in the security analysis of software systems. In this work, we introduce a novel approach to analyze system architecture models via ADTrees and to synthesize an optimal cost defense solution using MaxSMT. We generate an ADTree from the Architecture Analysis and Design Language (AADL) model with its possible attacks, and implemented defenses. We analyze these ADTrees to see if they satisfy their cyber-requirements. We then translate the ADTree into a set of logical formulas, that encapsulate both the logical structure of the tree, and the constraints on the cost of implementing the corresponding defenses, such that a minimization query to the MaxSMT solver returns a set of defenses that mitigate all possible attacks with minimal cost. We provide an initial evaluation of our tool on a delivery drone system model which shows promising results.

show abstract

mentioning

confidence: 99%