Abstract:Summary & Conclusions Model-based evaluation in cybersecurity has a long history. Attack Graphs (AGs) and Attack Trees (ATs) were the earlier developed graphical security models for cybersecurity analysis. However, they have limitations (e.g., scalability problem, state-space explosion problem, etc.) and lack the ability to capture other security features (e.g., countermeasures). To address the limitations and to cope with various security features, a graphical security model named attack countermeasure tree (ACT) was developed to perform security analysis by taking into account both attacks and countermeasures. In our research, we have developed different variants of a hierarchical graphical security model to solve the complexity, dynamicity, and scalability issues involved with security models in the security analysis of systems. In this paper, we summarize and classify security models into the following; graph-based, tree-based, and hybrid security models. We discuss the development of a hierarchical attack representation model (HARM) and different variants of the HARM, its applications, and usability in a variety of domains including the Internet of Things (IoT), Cloud, Software- Defined Networking, and Moving Target Defenses. Moreover, we discuss the pros and cons of each variant of HARM based on its applications and usage. Furthermore, several security metrics have been developed to be used with the graphical security model (including HARMs) to analyze the security posture of the systems and evaluate the effectiveness of defense mechanisms which is also being taken as input into optimization algorithms to compute optimal defense deployment. Thus, we provide the classification of the security metrics, including their discussions. Finally, we highlight existing problems and suggest future research directions in the area of graphical security models and applications. As a result of this work, a decision-maker can understand which type of HARM will suit their network or security analysis requirements.

Computer security analysis model based on fault tree

Fusion Assessment of Safety and Security for Intelligent Industrial Unmanned Systems

Research on Information Security Model and Security System Design

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Research Of Automatic Generating Analog Circuits Fault Tree Based On Ieee 1232

Application of fault tree analysis in the train data showing center

Quantitative Risk Assessment of Threats on SCADA Systems Using Attack Countermeasure Tree

System Modeling and Fault Tree Analysis Based on AltaRica

Fuzzy quantitative attack tree analysis

An Network Attack Modeling Method Based on MLL-AT

The Security Assessment on Programmable Logic Controller Based on Attack Tree Model and FAHP

Model-based Cybersecurity Analysis: Past Work and Future Directions

Dynamic Fault Tree Generation and Quantitative Analysis of System Reliability for Embedded Systems Based on SysML Models

Efficient Algorithms for Quantitative Attack Tree Analysis

Approach to Security Evaluation Based on Rough Set Theory for Host Computer

Research on an attack knowledge based enhanced at-tack tree model

Model-Based Generation of Attack-Fault Trees

Analysis and Research of Attack Model

Modelization and analysis of dynamic heterogeneous redundant system

Quantitative analysis of attack-fault trees via Markov decision processes