A probabilistic attacker model for quantitative verification of DoS security threats

Proceedings - International Computer Software and Applications Conference

Volumn , Issue , 2008, Pages 12-19

  Basagiannis, Stylianos ^a   Katsaros, Panagiotis ^a   Alexiou, Nikolaos ^a   Pombortsis, Andrew ^a  

^a ARISTOTLE UNIVERSITY OF THESSALONIKI   (Greece)

Author keywords

Denial of service; Model checking; Security

Indexed keywords

COMMERCE; COMMUNICATION; COMPUTER APPLICATIONS; COMPUTER SOFTWARE; COMPUTERS; ELECTRONIC COMMERCE; INTERNET PROTOCOLS; LAWS AND LEGISLATION; MARKOV PROCESSES; PATIENT MONITORING; PROBABILITY; SECURITY SYSTEMS; WORD PROCESSING;

COMMUNICATION PROTOCOLS; DENIAL OF SERVICE; DISCRETE-TIME MARKOV-CHAIN; PROBABILISTIC MODEL CHECKING; PROTOCOL IMPLEMENTATIONS; QUANTITATIVE VERIFICATION; REACH ABILITY; SECURITY; SECURITY THREATS; TOOL SETS;

MODEL CHECKING;

EID: 51949118177     PISSN: 07303157     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/COMPSAC.2008.48     Document Type: Conference Paper

References (15)

1. Agha, G., Greenwald, M., Gunter, C. A., Khanna, S., Meseguer, J., Sen, K., Thati, P. "Formal modelling and analysis of DoS using probabilistic rewrite theories", Proc. IEEE Work, on Foundations of Computer Security (FCS '05), Chicago, 2005.
2. Aura, T., Nikander, P., Leiwo, J., "DOS-resistant authentication with client puzzles", Proc. Security Protocols Worksh., Cambridge, Springer LNCS 2133, 170-181, 2001.
3. Basagiannis, S., Katsaros, P. and Pombortsis, A. "Intrusion Attack Tactics for the model checking of e-commerce security guarantees", Proc. 26th Int. Conf. on Computer Safety, Reliability and Security (SAFECOMP), Springer LNCS 4680, 238-251, 2007.
4. Dolev, D. and Yao, A. "On the security of public-key protocols", IEEE Trans. on Information Theory, 2 (29), 198-208, 1983.
5. st Int. Conf. Formal Aspects on Security, Springer LNCS 2629, 203-211, 2003.
6. IETF - Network Working Group. Host Identity Protocol. Internet Draft, Feb. 2007.
7. Karn, P. and Simpson, A. Photuris: Session-key management protocol, RFC 2522, IETF Network Working Group, 1999.
8. Kwiatkowska, M., Norman, G., Parker, D. "Stochastic model checking", In: Formal Methods for the Design of Comp., Comm. & Software Systems: Performance Evaluation, Springer LNCS 4486, 220-270, 2007.
9. Kwiatkowska, M. "Quantitative verification: Models, Techniques and Tools", Proc. 6th joint meeting of the Europ. Software Engineering Conf. and ACM SIGSOFT Symp. on the Foundations of Soft. Engineering (ESEC/FSE), ACM Press, 449-458, 2007.
10. Madan, B. B., Goseva-Popstojanova, K., Vaidyanathan, K., Trivedi, K. S. "Modeling and quantification of security attributes of software systems", Proc. IEEE/IFIP Int. Conf. on Dependable Systems and Networks (DSN 02), IEEE Computer Society, 2002.
11. InfraMP Project Web Site, http://infrahip.hiit.fi/, (last access: 21st of December 2007).
12. Meadows, C. "A cost-based framework for analysis of DoS in networks", J. Comp. Security, 9, 143-164, 2001
13. The PRISM Model Checker Web Site, http://www.prismmodelchecker.org/
14. Sen, K., Viswanathan, M., Agha, G. "On statistical model checking of stochastic systems", Pro. 17th Int. Conf. on Computer Aided Verification (CAV'05), Springer LNCS 3576, 266-288, 2000.
15. Tritilanunt, S., Boyd, C., Foo, E., Gonzalez Neto, J. M. "Using Coloured Petri Nets to simulate DoS-resistant protocols", Proc. 7th Worksh. on Practical Use of Coloured Petri Nets & the CPN Tools, Un. of Aarhus, Denmark, 2006.