Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
pwnPr3d: an Attack Graph Driven Probabilistic Threat Modeling Approach
KTH, School of Electrical Engineering (EES), Electric Power and Energy Systems. (Software Systems Architecture & Security)ORCID iD: 0000-0002-3293-1681
KTH, School of Electrical Engineering (EES), Electric Power and Energy Systems. (Software Systems Architecture & Security)ORCID iD: 0000-0002-2113-4900
KTH, School of Electrical Engineering (EES), Electric Power and Energy Systems. (Software Systems Architecture & Security)ORCID iD: 0000-0003-3922-9606
KTH, School of Electrical Engineering (EES), Electric Power and Energy Systems. (Software Systems Architecture & Security)ORCID iD: 0000-0003-3089-3885
2016 (English)In: Availability, Reliability and Security (ARES), 2016 11th International Conference on, IEEE conference proceedings, 2016Conference paper, Published paper (Refereed)
Abstract [en]

In this paper we introduce pwnPr3d, a probabilistic threat modeling approach for automatic attack graph generation based on network modeling. The aim is to provide stakeholders in organizations with a holistic approach that both provides high-level overview and technical details. Unlike many other threat modeling and attack graph approaches that rely heavily on manual work and security expertise, our language comes with built-in security analysis capabilities. pwnPr3d generates probability distributions over the time to compromise assets.

Place, publisher, year, edition, pages
IEEE conference proceedings, 2016.
Keywords [en]
:Threat Modeling; Network Security; Attack Graphs
National Category
Computer Systems
Identifiers
URN: urn:nbn:se:kth:diva-200698DOI: 10.1109/ARES.2016.77ISI: 000391214400034Scopus ID: 2-s2.0-85015304142OAI: oai:DiVA.org:kth-200698DiVA, id: diva2:1070330
Conference
International Conference on Availability, Reliability and Security (ARES)
Note

QC 20170202

Available from: 2017-02-01 Created: 2017-02-01 Last updated: 2017-05-19Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records BETA

Johnson, PontusEkstedt, MathiasLagerström, Robert

Search in DiVA

By author/editor
Johnson, PontusVernotte, AlexandreEkstedt, MathiasLagerström, Robert
By organisation
Electric Power and Energy Systems
Computer Systems

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 916 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf