Abstract:Security risk management can be applied on well-defined or existing systems; in this case, the objective is to identify existing vulnerabilities, assess the risks and provide for the adequate countermeasures. Security risk management can also be applied very early in the system's development life-cycle, when its architecture is still poorly defined; in this case, the objective is to positively influence the design work so as to produce a secure architecture from the start. The latter work is made difficult by the uncertainties on the architecture and the multiple round-trips required to keep the risk assessment study and the system architecture aligned. This is particularly true for very large projects running over many years. This paper addresses the issues raised by those risk assessment studies performed early in the system's development life-cycle. Based on industrial experience, it asserts that attack trees can help solve the human cognitive scalability issue related to securing those large, continuously-changing system-designs. However, big attack trees are difficult to build, and even more difficult to maintain. This paper therefore proposes a systematic approach to automate the construction and maintenance of such big attack trees, based on the system's operational and logical architectures, the system's traditional risk assessment study and a security knowledge database.

Streamlining Attack Tree Generation: A Fragment-Based Approach

Attack Tree Generation via Process Mining

Model-Based Generation of Attack-Fault Trees

Automated generation of attack trees with optimal shape and labelling

A Survey of Automatic Generation of Attack Trees and Attack Graphs

SSIRI 2009 Short Paper A New Method to Generate Attack Graphs

Modeling Attack, Defense and Threat Trees and the Cyber Kill Chain, ATT&CK and STRIDE Frameworks as Blackboard Architecture Networks

A New Method to Generate Attack Graphs

Risk Assessment Graphs: Utilizing Attack Graphs for Risk Assessment

Towards Automating the Construction & Maintenance of Attack Trees: a Feasibility Study

Identification of Attack Paths Using Kill Chain and Attack Graphs

Coordinated Attack Modeling Based on Attack Tree

Complete Attack Graph Automatic Generation Method Based on Attack Pattern

A Probability-Based Approach to Attack Graphs Generation

Complex Network Security Analysis Based on Attack Graph Model

AI-based Attack Graph Generation

QuADTool: Attack-Defense-Tree Synthesis, Analysis and Bridge to Verification

Attack Graph Generation with Implementation in Network Security

Attack Graph Analysis for Network Anti-Forensics.

Efficient and Generic Algorithms for Quantitative Attack Tree Analysis

Using Retriever Augmented Large Language Models for Attack Graph Generation