Automated generation of attack routes for service security analysis - A preliminary report

作者：Li Tong; Elahi Golnaz; Liu Lin; Yu Eric

来源：4th International i* Workshop, iStar 2010, 2010-06-07 to 2010-06-08.

• Automated generation
• Reasoning methods
• Security analysis
• Security level
• Security properties
• Service oriented computing
• Service security
• Vulnerability analysis

i* modeling has been used to characterize service-oriented computing in terms of intentional concepts such as agents, goals, dependencies, as well as services they provide or consume. The intentional models provide a rich basis for various security related reasoning, such as vulnerability analysis, attack and countermeasure evaluation, risk assessment, etc. In this work, we aim to explore a reasoning method over the i* models that goes beyond evaluating the satisfaction of security properties. We propose a service security modeling approach for automated generation of attack routes against a specific service. We analyze the security level for each service by using the resulting models. We aim to discover countermeasures and incorporate them into the security analysis process.

• 出版日期2010
• 单位清华大学