This paper presents and discusses the current state of Graphical Security Models (GrSM), in
terms of four GrSM phases:(i) generation,(ii) representation,(iii) evaluation, and (iv) …

Attack trees are a well established and commonly used framework for security modeling.
They provide a readable and structured representation of possible attacks against a system …

Graphical security models constitute a well-known, user-friendly way to represent the
security of a system. These classes of models are used by security experts to identify …

Attack trees are a popular method to represent cyberattack scenarios. It is often challenging
for organizations to design attack trees for relevant systems and scenarios, as this requires …

Ensuring security of complex systems is a difficult task that requires utilization of numerous
tools originating from various domains. Among those tools we find attack–defense trees, a …

Attack trees are a popular way to represent and evaluate potential security threats on
systems or infrastructures. The goal of this work is to provide a framework allowing to …

The ever-increasing complexity of cyber-physical systems is driving the need for assurance
of critical infrastructure and embedded systems. However, traditional methods to secure …

Systems that integrate cyber and physical aspects to create cyber-physical systems (CPS)
are becoming increasingly complex, but demonstrating the security of CPS is hard and …

Abstract Domain-specific quantitative modeling and analysis approaches are fundamental in
scenarios in which qualitative approaches are inappropriate or unfeasible. In this paper, we …

Attack trees allow a security analyst to obtain an overview of the potential vulnerabilities of a
system. Due to their refinement structure, attack trees support the analyst in understanding …