Attack Tree Generation via Process Mining

arXiv:2402.12040v1 Announce Type: new
Abstract: Attack Trees are a graphical model of security used to study threat scenarios. While visually appealing and supported by solid theories and effective tools, one of their main drawbacks remains the amount of effort required by security experts to design them from scratch. This work aims to remedy this by providing a method for the automatic generation of Attack Trees from attack logs. The main original feature of our approach w.r.t existing ones is the …

arxiv attack cs.cr design experts main mining process process mining remedy security security experts solid study threat tools trees work