Attack tree metrics are operad algebras

Fuente: arXiv
Saved in:
Bibliographic Details
Main Author: Lopuhaä-Zwakenberg, Milan
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866929214548082688
author Lopuhaä-Zwakenberg, Milan
author_facet Lopuhaä-Zwakenberg, Milan
contents Attack Trees (ATs) are a widely used tool for security analysis. ATs can be employed in quantitative security analysis through metrics, which assign a security value to an AT. Many different AT metrics exist, and there exist multiple general definitions that aim to study a wide variety of AT metrics at once. However, these all have drawbacks: they do not capture all metrics, and they do not easily generalize to extensions of ATs. In this paper, we introduce a definition of AT metrics based on category theory, specifically operad algebras. This encompasses all previous definitions of AT metrics, and is easily generalized to extensions of ATs. Furthermore, we show that under easily expressed operad-theoretic conditions, existing metric calculation algorithms can be extended in considerable generality.
format Preprint
id arxiv_https___arxiv_org_abs_2401_10008
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Attack tree metrics are operad algebras
Lopuhaä-Zwakenberg, Milan
Cryptography and Security
Category Theory
Attack Trees (ATs) are a widely used tool for security analysis. ATs can be employed in quantitative security analysis through metrics, which assign a security value to an AT. Many different AT metrics exist, and there exist multiple general definitions that aim to study a wide variety of AT metrics at once. However, these all have drawbacks: they do not capture all metrics, and they do not easily generalize to extensions of ATs. In this paper, we introduce a definition of AT metrics based on category theory, specifically operad algebras. This encompasses all previous definitions of AT metrics, and is easily generalized to extensions of ATs. Furthermore, we show that under easily expressed operad-theoretic conditions, existing metric calculation algorithms can be extended in considerable generality.
title Attack tree metrics are operad algebras
topic Cryptography and Security
Category Theory
url https://arxiv.org/abs/2401.10008