<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01442547</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-16T23:48:29+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Attack Tree Generation by Policy Invalidation</title>
            <author role="aut">
              <persName>
                <forename type="first">Marieta</forename>
                <forename type="middle">Georgieva</forename>
                <surname>Ivanova</surname>
              </persName>
              <email type="md5">13bd7647955131b86ad34d361c395ea0</email>
              <email type="domain">dtu.dk</email>
              <idno type="idhal" notation="numeric">999014</idno>
              <idno type="halauthorid" notation="string">1115782-999014</idno>
              <affiliation ref="#struct-302599"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Christian</forename>
                <forename type="middle">W.</forename>
                <surname>Probst</surname>
              </persName>
              <email type="md5">3ca2c09a4e1fdabe6eae161201292649</email>
              <email type="domain">dtu.dk</email>
              <idno type="idhal" notation="numeric">999015</idno>
              <idno type="halauthorid" notation="string">1115783-999015</idno>
              <affiliation ref="#struct-302599"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">René</forename>
                <forename type="middle">Rydhof</forename>
                <surname>Hansen</surname>
              </persName>
              <email type="md5">aa578f3ca141191947727b29f40f677a</email>
              <email type="domain">cs.aau.dk</email>
              <idno type="idhal" notation="numeric">850271</idno>
              <idno type="halauthorid" notation="string">328132-850271</idno>
              <affiliation ref="#struct-300821"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Florian</forename>
                <surname>Kammüller</surname>
              </persName>
              <email type="md5">0a835ddcc29849f7e452aa3d0bd92e4c</email>
              <email type="domain">mdx.ac.uk</email>
              <idno type="idhal" notation="numeric">999016</idno>
              <idno type="halauthorid" notation="string">185317-999016</idno>
              <affiliation ref="#struct-114147"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-01-20 16:47:50</date>
              <date type="whenModified">2026-01-18 12:28:03</date>
              <date type="whenReleased">2017-01-20 16:52:45</date>
              <date type="whenProduced">2015-08-24</date>
              <date type="whenEndEmbargoed">2018-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01442547v1/document">
                <date notBefore="2018-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01442547v1/file/978-3-319-24018-3_16_Chapter.pdf" id="file-1442547-1520668">
                <date notBefore="2018-01-01"/>
              </ref>
              <ref type="externalLink" target="http://orbit.dtu.dk/files/127237239/2015_IvanovaProbstHansenKammueller_AttackTreeGenerationByPolicyInvalidation_WISTP_75.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01442547</idno>
            <idno type="halUri">https://inria.hal.science/hal-01442547</idno>
            <idno type="halBibtex">ivanova:hal-01442547</idno>
            <idno type="halRefHtml">&lt;i&gt;9th Workshop on Information Security Theory and Practice (WISTP)&lt;/i&gt;, Aug 2015, Heraklion, Crete, Greece. pp.249-259, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-319-24018-3_16"&gt;&amp;#x27E8;10.1007/978-3-319-24018-3_16&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">9th Workshop on Information Security Theory and Practice (WISTP), Aug 2015, Heraklion, Crete, Greece. pp.249-259, &amp;#x27E8;10.1007/978-3-319-24018-3_16&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1442547-1520668"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-WISTP">IFIP-WISTP</idno>
            <idno type="stamp" n="IFIP-WG11-2">IFIP-WG11-2</idno>
            <idno type="stamp" n="IFIP-LNCS-9311" corresp="IFIP-LNCS">Information Security Theory and Practice</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 5: Short Papers</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Attack Tree Generation by Policy Invalidation</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Marieta</forename>
                    <forename type="middle">Georgieva</forename>
                    <surname>Ivanova</surname>
                  </persName>
                  <email type="md5">13bd7647955131b86ad34d361c395ea0</email>
                  <email type="domain">dtu.dk</email>
                  <idno type="idhal" notation="numeric">999014</idno>
                  <idno type="halauthorid" notation="string">1115782-999014</idno>
                  <affiliation ref="#struct-302599"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Christian</forename>
                    <forename type="middle">W.</forename>
                    <surname>Probst</surname>
                  </persName>
                  <email type="md5">3ca2c09a4e1fdabe6eae161201292649</email>
                  <email type="domain">dtu.dk</email>
                  <idno type="idhal" notation="numeric">999015</idno>
                  <idno type="halauthorid" notation="string">1115783-999015</idno>
                  <affiliation ref="#struct-302599"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">René</forename>
                    <forename type="middle">Rydhof</forename>
                    <surname>Hansen</surname>
                  </persName>
                  <email type="md5">aa578f3ca141191947727b29f40f677a</email>
                  <email type="domain">cs.aau.dk</email>
                  <idno type="idhal" notation="numeric">850271</idno>
                  <idno type="halauthorid" notation="string">328132-850271</idno>
                  <affiliation ref="#struct-300821"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Florian</forename>
                    <surname>Kammüller</surname>
                  </persName>
                  <email type="md5">0a835ddcc29849f7e452aa3d0bd92e4c</email>
                  <email type="domain">mdx.ac.uk</email>
                  <idno type="idhal" notation="numeric">999016</idno>
                  <idno type="halauthorid" notation="string">185317-999016</idno>
                  <affiliation ref="#struct-114147"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>9th Workshop on Information Security Theory and Practice (WISTP)</title>
                  <date type="start">2015-08-24</date>
                  <date type="end">2015-08-25</date>
                  <settlement>Heraklion, Crete</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>Raja Naeem Akram</editor>
                <editor>Sushil Jajodia</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security Theory and Practice</biblScope>
                  <biblScope unit="volume">LNCS-9311</biblScope>
                  <biblScope unit="pp">249-259</biblScope>
                  <date type="datePub">2015</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-319-24018-3_16</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Attacks on systems and organisations increasingly exploit human actors, for example through social engineering, complicating their formal treatment and automatic identification. Formalisation of human behaviour is difficult at best, and attacks on socio-technical systems are still mostly identified through brainstorming of experts. In this work we formalize attack tree generation including human factors; based on recent advances in system models we develop a technique to identify possible attacks analytically, including technical and human factors. Our systematic attack generation is based on invalidating policies in the system model by identifying possible sequences of actions that lead to an attack. The generated attacks are precise enough to illustrate the threat, and they are general enough to hide the details of individual steps.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
              <org type="consortium">WG 11.2</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-302599" status="VALID">
          <idno type="ROR">https://ror.org/04qtj9h94</idno>
          <orgName>Danmarks Tekniske Universitet = Technical University of Denmark</orgName>
          <orgName type="acronym">DTU</orgName>
          <desc>
            <address>
              <addrLine>Anker Engelunds Vej 1 , Bygning 101A , 2800 Kgs. Lyngby</addrLine>
              <country key="DK"/>
            </address>
            <ref type="url">http://www.dtu.dk/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-300821" status="VALID">
          <idno type="ROR">https://ror.org/04m5j1k67</idno>
          <orgName>Aalborg University</orgName>
          <orgName type="acronym">AAU</orgName>
          <desc>
            <address>
              <addrLine>Fredrik Bajers Vej 5, P.O. Box 159, DK - 9100 Aalborg</addrLine>
              <country key="DK"/>
            </address>
            <ref type="url">http://www.en.aau.dk/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-114147" status="VALID">
          <orgName>Middlesex University [London]</orgName>
          <desc>
            <address>
              <addrLine>Hendon Campus, The Burroughs, Hendon;NW4 4BT;London</addrLine>
              <country key="GB"/>
            </address>
            <ref type="url">http://www.mdx.ac.uk/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>