Stochastic Security Attack Impact Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for assessing system performance during security attacks, such as Deterministic State Testing (DST), are inadequate in evaluating the impact of stochastic security threats and do not effectively measure system reliability under various resource configurations and attack scenarios.
Innovation Solution
The method involves building resource failure and usage based Markov chains to model system behavior, simulating security attacks, and calculating a system affecting metric using state probabilities, allowing for the assessment of system reliability and performance impact under different attack conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Deterministic State Testing (DST) is used to assess system performance, then the assessment is based on ranking by usage and failures, but it cannot effectively evaluate the impact of stochastic security threats
Solution Approach 1:
The patent transforms the assessment approach by changing the mathematical model parameters from deterministic to stochastic. It uses Continuous Time Markov Chains (CTMC) to model system states and transitions, enabling probabilistic assessment of security attack impacts. This parameter change allows the system to evaluate reliability under uncertain attack conditions rather than relying on fixed deterministic rankings.
Solution Approach 2:
The patent replaces the mechanical/Deterministic State Testing approach with a stochastic mathematical modeling system. Instead of using deterministic state transitions and fixed failure rankings, it implements a probabilistic model using Markov chains that can capture the random nature of security attacks and system responses, thereby improving measurement precision for stochastic threats.
2Measurement precision
If traditional performance testing methods are used, then the testing process is simpler, but the system cannot accurately measure performance impact under various resource configurations and attack scenarios
Solution Approach 1:
The patent segments the system assessment into distinct components: resource usage modeling, failure modeling, and attack scenario analysis. By dividing the complex assessment task into separate Markov chain models for resource usage and failure patterns, it manages complexity while achieving accurate measurement of performance under various attack scenarios and resource configurations.
Solution Approach 2:
The patent introduces Markov chain models as intermediary mathematical structures between the physical system and the assessment metrics. These intermediary models translate complex system behaviors and attack patterns into measurable state transitions and probabilities, enabling accurate performance measurement without directly observing every system detail.
3Adaptability or versatility
If deterministic state ranking is used for performance testing, then the testing approach is straightforward, but it fails to capture the probabilistic nature of security threats and system responses
Solution Approach 1:
The patent creates a universal stochastic modeling framework using Markov chains that can handle multiple types of security attacks and system configurations through a single unified approach. This multi-functional model adapts to different attack scenarios and resource configurations without requiring separate deterministic test cases for each scenario, thereby improving versatility while managing complexity through model reuse.
Data Source
AI summary
A method for assessing an impact of a security attack on a system includes defining a system affecting metric for an observation period as a fraction of time the system satisfies a defined specification, defining a resource failure based model and a resource usage based model for the system, obtaining results for each of a plurality of states of the resource failure based model and the resource usage based model, solving the resource failure based model and the resource usage based model and obtaining a term fraction of time each model spends on each of the plurality of states, obtaining a state probability according to the term fraction, and obtaining a measure of the system affecting metric according to the state probability.


