Volume 7 Number 7 (Jul. 2012)
Home > Archive > 2012 > Volume 7 Number 7 (Jul. 2012) >
JSW 2012 Vol.7(7): 1488-1495 ISSN: 1796-217X
doi: 10.4304/jsw.7.7.1488-1495

Probabilistic Attack Scenarios to Evaluate Policies over Communication Protocols

Samir Ouchani, Yosr Jarraya, Otmane Ait Mohamed and Mourad Debbabi
Computer Security Laboratory (CLS), Hardware Verification Group (HVG) Concordia Universiy, Montreal, Canada

Abstract—Security is an important non-functional requirement that should be analyzed in any system or software that is potentially exposed to security threats. Since we can’t manage what we don’t measure, it is not enough to address only the qualitative assessment of security. In this paper, we propose a novel approach that leads to a qualitative and quantitative analysis of communication protocols. Our approach is based on probabilistic model-checking and probabilistic attack scenarios. To the best of our knowledge, the present work is the first initiative that combines these two techniques in the verification of security of communication protocol. Considering that security attacks are random in nature, we quantify this randomness using probability values denoting the likelihoods of attacks to occur. The composed model formed by the attack scenario and the system model is then analyzed using the probabilistic model-checker PRISM against a set of security and performance requirements. As a case study, we demonstrated the applicability of our approach on Secure Real-time Transport Protocol over Real- Time Streaming Protocol (RTSP/SRTP).

[PDF]

Cite: Samir Ouchani, Yosr Jarraya, Otmane Ait Mohamed and Mourad Debbabi, "Probabilistic Attack Scenarios to Evaluate Policies over Communication Protocols," Journal of Software vol. 7, no. 7, pp. 1488-1495, 2012.

General Information

ISSN: 1796-217X (Online)
Frequency:  Bimonthly (Since 2020)
Editor-in-Chief: Prof. Antanas Verikas
Executive Editor: Ms. Yoyo Y. Zhou
Abstracting/ Indexing: DBLP, EBSCO, Google Scholar, ProQuest, INSPEC(IET), ULRICH's Periodicals Directory, WorldCat, etc
E-mail: jsw@iap.org
  • Apr 26, 2021 News!

    Vol 14, No 4- Vol 14, No 12 has been indexed by IET-(Inspec)     [Click]

  • Jun 22, 2020 News!

    Papers published in JSW Vol 14, No 1- Vol 15 No 4 have been indexed by DBLP     [Click]

  • Sep 13, 2021 News!

    The papers published in Vol 16, No 6 have all received dois from Crossref    [Click]

  • Jan 28, 2021 News!

    [CFP] 2021 the annual meeting of JSW Editorial Board, ICCSM 2021, will be held in Rome, Italy, July 21-23, 2021   [Click]

  • Sep 13, 2021 News!

    Vol 16, No 6 has been published with online version     [Click]