Abstract:Summary & Conclusions Model-based evaluation in cybersecurity has a long history. Attack Graphs (AGs) and Attack Trees (ATs) were the earlier developed graphical security models for cybersecurity analysis. However, they have limitations (e.g., scalability problem, state-space explosion problem, etc.) and lack the ability to capture other security features (e.g., countermeasures). To address the limitations and to cope with various security features, a graphical security model named attack countermeasure tree (ACT) was developed to perform security analysis by taking into account both attacks and countermeasures. In our research, we have developed different variants of a hierarchical graphical security model to solve the complexity, dynamicity, and scalability issues involved with security models in the security analysis of systems. In this paper, we summarize and classify security models into the following; graph-based, tree-based, and hybrid security models. We discuss the development of a hierarchical attack representation model (HARM) and different variants of the HARM, its applications, and usability in a variety of domains including the Internet of Things (IoT), Cloud, Software- Defined Networking, and Moving Target Defenses. Moreover, we discuss the pros and cons of each variant of HARM based on its applications and usage. Furthermore, several security metrics have been developed to be used with the graphical security model (including HARMs) to analyze the security posture of the systems and evaluate the effectiveness of defense mechanisms which is also being taken as input into optimization algorithms to compute optimal defense deployment. Thus, we provide the classification of the security metrics, including their discussions. Finally, we highlight existing problems and suggest future research directions in the area of graphical security models and applications. As a result of this work, a decision-maker can understand which type of HARM will suit their network or security analysis requirements.

Graph models for Cybersecurity -- A Survey

A Survey of Automatic Generation of Attack Trees and Attack Graphs

Model-based Cybersecurity Analysis: Past Work and Future Directions

Survey of Attack Graph Analysis Methods from the Perspective of Data and Knowledge Processing

Network Modelling in Analysing Cyber-related Graphs

Attack Graph Analysis for Network Anti-Forensics.

Graph Mining for Cybersecurity: A Survey

Automatic Network Threats Modeling for Attack Graph

Complex Network Security Analysis Based on Attack Graph Model

A New Model for Securing Networks Based on Attack Graph

A Predictive Framework for Cyber Security Analytics using Attack Graphs

Research on Attack Graph Generation for Network Security Situation.

A Scalable Approach to Full Attack Graphs Generation

Automatic Generation of Host-Based Network Attack Graph

Attack graph model based on extended Markov chain

Attack Graph Generation with Implementation in Network Security

Generate attack graph for network security analysis

Graph-Theoretic Approach for Manufacturing Cybersecurity Risk Modeling and Assessment

Threat Modelling in Internet of Things (IoT) Environment Using Dynamic Attack Graphs

An Adjacency Matrixes-Based Model for Network Security Analysis