Graphical Models for Security

1. Front Matter

   Pages I-XI

   PDF

2. Graphical Modeling of Security Arguments: Current State and Future Directions

   • Dan Ionita, Margaret Ford, Alexandr Vasenev, Roel Wieringa

   Pages 1-16

3. Evil Twins: Handling Repetitions in Attack–Defense Trees

   • Angèle Bossuat, Barbara Kordy

   Pages 17-37

4. Visualizing Cyber Security Risks with Bow-Tie Diagrams

   • Karin Bernsmed, Christian Frøystad, Per Håkon Meland, Dag Atle Nesheim, Ørnulf Jan Rødseth

   Pages 38-56

5. CSIRA: A Method for Analysing the Risk of Cybersecurity Incidents

   • Aitor Couce-Vieira, Siv Hilde Houmb, David Ríos-Insua

   Pages 57-74

6. Quantitative Evaluation of Attack Defense Trees Using Stochastic Timed Automata

   • René Rydhof Hansen, Peter Gjøl Jensen, Kim Guldstrand Larsen, Axel Legay, Danny Bøgsted Poulsen

   Pages 75-90

7. Probabilistic Modeling of Insider Threat Detection Systems

   • Brian Ruttenberg, Dave Blumstein, Jeff Druce, Michael Howard, Fred Reed, Leslie Wilfong et al.

   Pages 91-98

8. Security Modeling for Embedded System Design

   • Letitia W. Li, Florian Lugou, Ludovic Apvrille

   Pages 99-106

9. Circle of Health Based Access Control for Personal Health Information Systems

   • Ryan Habibi, Jens Weber, Morgan Price

   Pages 107-114

10. New Directions in Attack Tree Research: Catching up with Industrial Needs

    • Olga Gadyatskaya, Rolando Trujillo-Rasua

    Pages 115-126

11. Employing Graphical Risk Models to Facilitate Cyber-Risk Monitoring - the WISER Approach

    • Aleš Černivec, Gencer Erdogan, Alejandra Gonzalez, Atle Refsdal, Antonio Alvarez Romero

    Pages 127-146

12. Back Matter

    Pages 147-147

    PDF

This book constitutes revised selected papers from the 4^th International Workshop on Graphical Models for Security, GraMSec 2017, held in Santa Barbara, CA, USA, in August 2017. The 5 full and 4 short papers presented in this volume were carefully reviewed and selected from 19 submissions. The book also contains one invited paper from the WISER project. The contributions deal with the latest research and developments on graphical models for security.

• artificial intelligence
• authentication
• computer crime
• computer science
• cyber-attacks
• embedded systems
• programming languages
• security analysis
• security requirements
• semantics
• software engineering

• Pennsylvania State University, University Park, USA

  Peng Liu

• University of Luxembourg, Esch-sur-Alzette, Luxembourg

  Sjouke Mauw

• Blindern, SINTEF ICT, Oslo, Norway

  Ketil Stolen

Policies and ethics