Processing Multi-parameter Attacktrees with Estimated Parameter Values

Abstract. Authors extend the multi-parameter attacktree model to include inaccurate or estimated parameter values, which are modelled as probabilistic interval estimations. The paper develops mathematical tools to extend the computation rules of the attacktree model to work with interval estimations instead of point estimates. We present a sample computation routine and discuss how to interpret the analysis results and how to choose the optimal or an economically justified security level.

• Type: Conference
• Year: 2007
• Where: IWSEC
• Authors: Aivo Jürgenson, Jan Willemson
• Keywords: Attacktree Model, Interval Estimations, IWSEC 2007, Probabilistic Interval Estimations, Security Privacy