Abstract:Summary & Conclusions Model-based evaluation in cybersecurity has a long history. Attack Graphs (AGs) and Attack Trees (ATs) were the earlier developed graphical security models for cybersecurity analysis. However, they have limitations (e.g., scalability problem, state-space explosion problem, etc.) and lack the ability to capture other security features (e.g., countermeasures). To address the limitations and to cope with various security features, a graphical security model named attack countermeasure tree (ACT) was developed to perform security analysis by taking into account both attacks and countermeasures. In our research, we have developed different variants of a hierarchical graphical security model to solve the complexity, dynamicity, and scalability issues involved with security models in the security analysis of systems. In this paper, we summarize and classify security models into the following; graph-based, tree-based, and hybrid security models. We discuss the development of a hierarchical attack representation model (HARM) and different variants of the HARM, its applications, and usability in a variety of domains including the Internet of Things (IoT), Cloud, Software- Defined Networking, and Moving Target Defenses. Moreover, we discuss the pros and cons of each variant of HARM based on its applications and usage. Furthermore, several security metrics have been developed to be used with the graphical security model (including HARMs) to analyze the security posture of the systems and evaluate the effectiveness of defense mechanisms which is also being taken as input into optimization algorithms to compute optimal defense deployment. Thus, we provide the classification of the security metrics, including their discussions. Finally, we highlight existing problems and suggest future research directions in the area of graphical security models and applications. As a result of this work, a decision-maker can understand which type of HARM will suit their network or security analysis requirements.

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Dynamic defenses in cyber security: Techniques, methods and challenges

Mitigating the Risk of Advanced Cyber Attacks: The Role of Quality, Covertness and Intensity of Use of Cyber Weapons

Analysis and Research of Attack Model

A Two-Dimension Security Assessing Model for CMDs Combined with Generalized Stochastic Petri Net

Application of Cybernetics and Control Theory for a New Paradigm in Cybersecurity

Mimic Defense: a Designed-in Cybersecurity Defense Framework.

A Cyberspace Attack and Defense Model with Security Performance Analysis Based on Automata Theory

A Model of APT Attack Defense Based on Cyber Threat Detection

Model-based Cybersecurity Analysis: Past Work and Future Directions

Formal Description of Cyber Attacks

Modeling and control of Cyber-Physical Systems subject to cyber attacks: A survey of recent advances and challenges

A Generalized Information Security Model SOCMD for CMD Systems

Simulations in Cyber-Security: A Review of Cognitive Modeling of Network Attackers, Defenders, and Users

Optimal Strategy for Cyberspace Mimic Defense Based on Game Theory

Triple methods-based empirical assessment of the effectiveness of adaptive cyber defenses in the cloud

A Markov Game Model for AI-based Cyber Security Attack Mitigation

Cyber Defense as a Complex Adaptive System: A model-based approach to strategic policy design

Moving Target Defense Techniques: A Survey