Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study - The Practice of Enterprise Modeling (PoEM 2016)
Conference Papers Year : 2016

Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study

Abstract

Securing automated teller machines (ATMs), as critical and complex infrastructure, requires a precise understanding of the associated threats. This paper reports on the application of attack-defense trees to model and analyze the security of ATMs. We capture the most dangerous multi-stage attack scenarios applicable to ATM structures, and establish a practical experience report, where we reflect on the process of modeling ATM threats via attack-defense trees. In particular, we share our insights into the benefits and drawbacks of attack-defense tree modeling, as well as best practices and lessons learned.
Fichier principal
Vignette du fichier
416579_1_En_24_Chapter.pdf (206.53 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01653513 , version 1 (01-12-2017)

Licence

Identifiers

Cite

Marlon Fraile, Margaret Ford, Olga Gadyatskaya, Rajesh Kumar, Mariëlle Stoelinga, et al.. Using Attack-Defense Trees to Analyze Threats and Countermeasures in an ATM: A Case Study. 9th IFIP Working Conference on The Practice of Enterprise Modeling (PoEM), Nov 2016, Skövde, Sweden. pp.326-334, ⟨10.1007/978-3-319-48393-1_24⟩. ⟨hal-01653513⟩
404 View
305 Download

Altmetric

Share

More