Modeling and Execution of Complex Attack Scenarios using Interval Timed Colored Petri Nets

The commonly used flaw hypothesis model (FHM) for performing penetration tests provides only limited, highlevel guidance for the derivation of actual penetration attempts. In this paper, a mechanism for the systematic modeling, simulation, and exploitation of complex multistage and multi-agent vulnerabilities in networked and distributed systems based on stochastic and interval-timed colored Petri nets is described and analyzed through case studies elucidating several properties of Petri net variants and their suitability to modeling this type of attack.

• Type: Conference
• Year: 2006
• Where: IWIA
• Authors: Ole Martin Dahl, Stephen D. Wolthusen
• Keywords: Actual Penetration Attempts, Information Management, IWIA 2006, Petri Net, Petri Net Variants