Stochastic Security Attack Impact Assessment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for assessing system performance during security attacks, such as Deterministic State Testing (DST), are inadequate in evaluating the impact of stochastic security threats and do not effectively measure system reliability under various resource configurations and attack scenarios.

Innovation Solution

The method involves building resource failure and usage based Markov chains to model system behavior, simulating security attacks, and calculating a system affecting metric using state probabilities, allowing for the assessment of system reliability and performance impact under different attack conditions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If Deterministic State Testing (DST) is used to assess system performance, then the assessment is based on ranking by usage and failures, but it cannot effectively evaluate the impact of stochastic security threats

Engineering Contradiction:
Improvesystem reliability under security attacksVSAvoidaccuracy of security attack impact assessment
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent transforms the assessment approach by changing the mathematical model parameters from deterministic to stochastic. It uses Continuous Time Markov Chains (CTMC) to model system states and transitions, enabling probabilistic assessment of security attack impacts. This parameter change allows the system to evaluate reliability under uncertain attack conditions rather than relying on fixed deterministic rankings.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces the mechanical/Deterministic State Testing approach with a stochastic mathematical modeling system. Instead of using deterministic state transitions and fixed failure rankings, it implements a probabilistic model using Markov chains that can capture the random nature of security attacks and system responses, thereby improving measurement precision for stochastic threats.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If traditional performance testing methods are used, then the testing process is simpler, but the system cannot accurately measure performance impact under various resource configurations and attack scenarios

Engineering Contradiction:
Improveaccuracy of performance measurement under attackVSAvoidcomplexity of assessment model
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the system assessment into distinct components: resource usage modeling, failure modeling, and attack scenario analysis. By dividing the complex assessment task into separate Markov chain models for resource usage and failure patterns, it manages complexity while achieving accurate measurement of performance under various attack scenarios and resource configurations.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces Markov chain models as intermediary mathematical structures between the physical system and the assessment metrics. These intermediary models translate complex system behaviors and attack patterns into measurable state transitions and probabilities, enabling accurate performance measurement without directly observing every system detail.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If deterministic state ranking is used for performance testing, then the testing approach is straightforward, but it fails to capture the probabilistic nature of security threats and system responses

Engineering Contradiction:
Improveability to evaluate stochastic attack scenariosVSAvoidcomplexity of stochastic modeling
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates a universal stochastic modeling framework using Markov chains that can handle multiple types of security attacks and system configurations through a single unified approach. This multi-functional model adapts to different attack scenarios and resource configurations without requiring separate deterministic test cases for each scenario, thereby improving versatility while managing complexity through model reuse.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS8832839B2Assessing system performance impact of security attacks
Publication Date: 2014.09.09 SIEMENS AG
  • US8832839B2 patent drawing
  • US8832839B2 patent drawing
  • US8832839B2 patent drawing

AI summary

A method for assessing an impact of a security attack on a system includes defining a system affecting metric for an observation period as a fraction of time the system satisfies a defined specification, defining a resource failure based model and a resource usage based model for the system, obtaining results for each of a plurality of states of the resource failure based model and the resource usage based model, solving the resource failure based model and the resource usage based model and obtaining a term fraction of time each model spends on each of the plurality of states, obtaining a state probability according to the term fraction, and obtaining a measure of the system affecting metric according to the state probability.