Graphical Models for Security

Abstract

We discuss in this paper the use of SysML-Sec attack graphs as a graphical and semi-formal representation for complex attacks. We illustrate this on a PC and mobile malware example. We furthermore pro-vide examples of the expressivity of the operators used in such diagrams. We finally formalize the attack traces described by these operators based on timed automata.