Analyzing Attack Strategies Through Anti-goal Refinement - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2015

Analyzing Attack Strategies Through Anti-goal Refinement

Tong Li
  • Function : Author
  • PersonId : 998950
Jennifer Horkoffi
  • Function : Author
  • PersonId : 998951
Elda Pajai
  • Function : Author
  • PersonId : 998952
John Mylopoulos
  • Function : Author
  • PersonId : 998954


Analyzing security from an attacker’s perspective has been accepted as an effective approach for dealing with security requirements for complex systems. However, there is no systematic approach for constructing attack scenarios. As a result, the completeness of the derived attack scenarios is subject to the expertise of analysts. In this paper, we propose a systematic process for identifying attack scenarios to support security analysis, founded on anti-goal refinement. In particular, we examine three real attack scenarios in order to understand attack strategies that have been applied in reality. Based on our examination, we propose a comprehensive anti-goal refinement framework, which consists of five anti-goal refinement patterns and an analysis process for using the patterns as part of security design. Finally, we evaluate the proposed anti-goal refinement framework by applying it to a credit card theft scenario.
Fichier principal
Vignette du fichier
978-3-319-25897-3_6_Chapter.pdf (322.21 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01442299 , version 1 (20-01-2017)





Tong Li, Jennifer Horkoffi, Elda Pajai, Kristian Beckers, John Mylopoulos. Analyzing Attack Strategies Through Anti-goal Refinement. 8th Practice of Enterprise Modelling (P0EM), Nov 2015, Valencia, Spain. pp.75-90, ⟨10.1007/978-3-319-25897-3_6⟩. ⟨hal-01442299⟩
72 View
92 Download



Gmail Facebook Twitter LinkedIn More