AADL-based automatic generation method of attack defense tree

Abstract

The invention discloses an AADL-based automatic generation method of an attack defense tree. The method comprises the following steps: modeling an information physical fusion system by adopting an AADL model; determining vulnerabilities of each component of the cyber-physical fusion system, and tracking and determining an attack path; selecting a final attack target of the system according to the attack path; taking the AADL model and an attack target as input, and obtaining an attack defense tree through a template library; and calculating the attack defense tree to obtain a minimum defense measure, performing quantitative evaluation on an attack probability value and a defense cost by combining a Bayesian network and a CVSS score value, and calculating a risk value of the system. The problems that a complex system is difficult to model, and risk vulnerabilities in the system are difficult to determine, track and solve, including the influence of network attacks on a physical system and an information system, are solved.

Description

technical field [0001] The invention relates to the field of network security, in particular to an automatic generation method of an attack defense tree based on AADL. Background technique [0002] AADL (Architecture Analysis and Design Language) is a modeling language used to describe the architecture of complex cyber-physical fusion systems, and is widely used in the modeling and verification of safety-critical systems. Compared with other modeling languages ​​such as SysML (Systems Modeling Language) and UML (Unified Modeling Language), AADL provides powerful semantics for the classification of standard software and hardware components. Moreover, UML has the disadvantage of not being able to describe the non-functional characteristics of a system, and SysML lacks an explicit basis for rigorous formal analysis. In contrast, AADL provides not only a description of system functionality, but also a description of the interaction between the physical system architecture, embe...

AI Technical Summary

Problems solved by technology

Deng Jiajia, a researcher at Nanjing University of Aeronautics and Astronautics, proposed a real-time verification method based on SysML and AADL to solve the problem that it is difficult to analyze and verify the real-time performance of the brake control system during the system design stage. However, their method of constructing the AADL model based on the SysML module diagram lacks standardization And precise description, unable to form a complete architecture, and for complex systems, it is difficult to model, determine, track and solve problems in risk vulnerabilities in the system

Images