The attacker does not always hold the initiative: attack trees with external refinement

Ross Horne; Sjouke Mauw; Alwen Tiu

doi:10.1007/978-3-030-15465-3_6

The attacker does not always hold the initiative: attack trees with external refinement

Ross Horne, Sjouke Mauw, Alwen Tiu^*

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

Abstract

Attack trees provide a structure to an attack scenario, where disjunctions represent choices decomposing attacker’s goals into smaller subgoals. This paper investigates the nature of choices in attack trees. For some choices, the attacker has the initiative, but for other choices either the environment or an active defender decides. A semantics for attack trees combining both types of choice is expressed in linear logic and connections with extensive-form games are highlighted. The linear logic semantics defines a specialisation preorder enabling trees, not necessarily equal, to be compared in such a way that all strategies are preserved.

Original language	English
Title of host publication	Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers
Editors	David Pym, George Cybenko, Barbara Fila
Place of Publication	Cham
Publisher	Springer-Verlag
Pages	90-110
Number of pages	21
Volume	11086
ISBN (Electronic)	9783030154653
ISBN (Print)	9783030154646
DOIs	https://doi.org/10.1007/978-3-030-15465-3_6
Publication status	Published - 31 Mar 2019
Event	5th International Workshop on Graphical Models for Security, GraMSec 2018 - Oxford, United Kingdom Duration: 8 Jul 2018 → 8 Jul 2018

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	11086 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	5th International Workshop on Graphical Models for Security, GraMSec 2018
Country/Territory	United Kingdom
City	Oxford
Period	8/07/18 → 8/07/18

Funding

Horne and Tiu receive support from MOE Tier 2 grant MOE2014-T2-2-076 and the National Research Foundation Singapore under its National Cybersecurity R&D Program (Award No. NRF2014NCR-NCR001-30). Mauw received funding from the Fonds National de la Recherche Luxembourg, grant C11/IS/1183245 (ADT2P), and the European Commissions Seventh Framework Programme (FP7/2007–2013) under grant agreement number 318003 (TREsPASS). Acknowledgment. Horne and Tiu receive support from MOE Tier 2 grant MOE2014-T2-2-076 and the National Research Foundation Singapore under its National Cybersecurity R&D Program (Award No. NRF2014NCR-NCR001-30). Mauw received funding from the Fonds National de la Recherche Luxembourg, grant C11/IS/1183245 (ADT2P), and the European Commissions Seventh Framework Programme (FP7/2007–2013) under grant agreement number 318003 (TREsPASS).

Keywords

attack trees
extensive-form games
game semantics
linear logic
attack scenario
computer circuits

Access to Document

10.1007/978-3-030-15465-3_6

Cite this

Horne, R., Mauw, S., & Tiu, A. (2019). The attacker does not always hold the initiative: attack trees with external refinement. In D. Pym, G. Cybenko, & B. Fila (Eds.), Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers (Vol. 11086 , pp. 90-110). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11086 LNCS). Springer-Verlag. https://doi.org/10.1007/978-3-030-15465-3_6

Horne, Ross ; Mauw, Sjouke ; Tiu, Alwen. / The attacker does not always hold the initiative : attack trees with external refinement. Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers. editor / David Pym ; George Cybenko ; Barbara Fila. Vol. 11086 Cham : Springer-Verlag, 2019. pp. 90-110 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{0cde07b86dd14fc1b3e9f3058d402faa,

title = "The attacker does not always hold the initiative: attack trees with external refinement",

abstract = "Attack trees provide a structure to an attack scenario, where disjunctions represent choices decomposing attacker{\textquoteright}s goals into smaller subgoals. This paper investigates the nature of choices in attack trees. For some choices, the attacker has the initiative, but for other choices either the environment or an active defender decides. A semantics for attack trees combining both types of choice is expressed in linear logic and connections with extensive-form games are highlighted. The linear logic semantics defines a specialisation preorder enabling trees, not necessarily equal, to be compared in such a way that all strategies are preserved.",

keywords = "attack trees, extensive-form games, game semantics, linear logic, attack scenario, computer circuits",

author = "Ross Horne and Sjouke Mauw and Alwen Tiu",

note = "Funding Information: Horne and Tiu receive support from MOE Tier 2 grant MOE2014-T2-2-076 and the National Research Foundation Singapore under its National Cybersecurity R\&D Program (Award No. NRF2014NCR-NCR001-30). Mauw received funding from the Fonds National de la Recherche Luxembourg, grant C11/IS/1183245 (ADT2P), and the European Commissions Seventh Framework Programme (FP7/2007–2013) under grant agreement number 318003 (TREsPASS). Funding Information: . Horne and Tiu receive support from MOE Tier 2 grant MOE2014-T2-2-076 and the National Research Foundation Singapore under its National Cybersecurity R\&D Program (Award No. NRF2014NCR-NCR001-30). Mauw received funding from the Fonds National de la Recherche Luxembourg, grant C11/IS/1183245 (ADT2P), and the European Commissions Seventh Framework Programme (FP7/2007–2013) under grant agreement number 318003 (TREsPASS). Publisher Copyright: {\textcopyright} 2019, Springer Nature Switzerland AG. Horne, R., Mauw, S., Tiu, A. (2019). The Attacker Does not Always Hold the Initiative: Attack Trees with External Refinement. In: Cybenko, G., Pym, D., Fila, B. (eds) Graphical Models for Security. GraMSec 2018. Lecture Notes in Computer Science(), vol 11086. Springer, Cham. https://doi.org/10.1007/978-3-030-15465-3\_6; 5th International Workshop on Graphical Models for Security, GraMSec 2018 ; Conference date: 08-07-2018 Through 08-07-2018",

year = "2019",

month = mar,

day = "31",

doi = "10.1007/978-3-030-15465-3\_6",

language = "English",

isbn = "9783030154646",

volume = "11086 ",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer-Verlag",

pages = "90--110",

editor = "David Pym and George Cybenko and Barbara Fila",

booktitle = "Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers",

}

Horne, R, Mauw, S & Tiu, A 2019, The attacker does not always hold the initiative: attack trees with external refinement. in D Pym, G Cybenko & B Fila (eds), Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers. vol. 11086 , Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 11086 LNCS, Springer-Verlag, Cham, pp. 90-110, 5th International Workshop on Graphical Models for Security, GraMSec 2018, Oxford, United Kingdom, 8/07/18. https://doi.org/10.1007/978-3-030-15465-3_6

The attacker does not always hold the initiative: attack trees with external refinement. / Horne, Ross; Mauw, Sjouke; Tiu, Alwen.
Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers. ed. / David Pym; George Cybenko; Barbara Fila. Vol. 11086 Cham: Springer-Verlag, 2019. p. 90-110 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11086 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

TY - GEN

T1 - The attacker does not always hold the initiative

T2 - 5th International Workshop on Graphical Models for Security, GraMSec 2018

AU - Horne, Ross

AU - Mauw, Sjouke

AU - Tiu, Alwen

N1 - Funding Information: Horne and Tiu receive support from MOE Tier 2 grant MOE2014-T2-2-076 and the National Research Foundation Singapore under its National Cybersecurity R&D Program (Award No. NRF2014NCR-NCR001-30). Mauw received funding from the Fonds National de la Recherche Luxembourg, grant C11/IS/1183245 (ADT2P), and the European Commissions Seventh Framework Programme (FP7/2007–2013) under grant agreement number 318003 (TREsPASS). Funding Information: . Horne and Tiu receive support from MOE Tier 2 grant MOE2014-T2-2-076 and the National Research Foundation Singapore under its National Cybersecurity R&D Program (Award No. NRF2014NCR-NCR001-30). Mauw received funding from the Fonds National de la Recherche Luxembourg, grant C11/IS/1183245 (ADT2P), and the European Commissions Seventh Framework Programme (FP7/2007–2013) under grant agreement number 318003 (TREsPASS). Publisher Copyright: © 2019, Springer Nature Switzerland AG. Horne, R., Mauw, S., Tiu, A. (2019). The Attacker Does not Always Hold the Initiative: Attack Trees with External Refinement. In: Cybenko, G., Pym, D., Fila, B. (eds) Graphical Models for Security. GraMSec 2018. Lecture Notes in Computer Science(), vol 11086. Springer, Cham. https://doi.org/10.1007/978-3-030-15465-3_6

PY - 2019/3/31

Y1 - 2019/3/31

N2 - Attack trees provide a structure to an attack scenario, where disjunctions represent choices decomposing attacker’s goals into smaller subgoals. This paper investigates the nature of choices in attack trees. For some choices, the attacker has the initiative, but for other choices either the environment or an active defender decides. A semantics for attack trees combining both types of choice is expressed in linear logic and connections with extensive-form games are highlighted. The linear logic semantics defines a specialisation preorder enabling trees, not necessarily equal, to be compared in such a way that all strategies are preserved.

AB - Attack trees provide a structure to an attack scenario, where disjunctions represent choices decomposing attacker’s goals into smaller subgoals. This paper investigates the nature of choices in attack trees. For some choices, the attacker has the initiative, but for other choices either the environment or an active defender decides. A semantics for attack trees combining both types of choice is expressed in linear logic and connections with extensive-form games are highlighted. The linear logic semantics defines a specialisation preorder enabling trees, not necessarily equal, to be compared in such a way that all strategies are preserved.

KW - attack trees

KW - extensive-form games

KW - game semantics

KW - linear logic

KW - attack scenario

KW - computer circuits

UR - https://www.scopus.com/pages/publications/85064679208

U2 - 10.1007/978-3-030-15465-3_6

DO - 10.1007/978-3-030-15465-3_6

M3 - Conference contribution book

AN - SCOPUS:85064679208

SN - 9783030154646

VL - 11086

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 90

EP - 110

BT - Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers

A2 - Pym, David

A2 - Cybenko, George

A2 - Fila, Barbara

PB - Springer-Verlag

CY - Cham

Y2 - 8 July 2018 through 8 July 2018

ER -

Horne R, Mauw S, Tiu A. The attacker does not always hold the initiative: attack trees with external refinement. In Pym D, Cybenko G, Fila B, editors, Graphical Models for Security - 5th International Workshop, GraMSec 2018, Revised Selected Papers. Vol. 11086 . Cham: Springer-Verlag. 2019. p. 90-110. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-15465-3_6

The attacker does not always hold the initiative: attack trees with external refinement

Abstract

Publication series

Conference

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this