Attack Graph-Based Data Presentation for Use in Automated Security Analysis Systems

Abstract

A mathematical model for data representation is developed for use in automated security analysis systems. The model allows linking information about the system obtained by a specialist during the security analysis process with the set of attack scenarios in which they may be involved. Each time a scenario is applied, new information emerges, which helps expand the attack graph.