Probabilistic Model of Control-Flow Altering based Malicious Attacks (Poster submission)

摘要

Introduction. The system designers need in various design tools which could help them both for estimation of possible threats to the security and select one or another ways of their neutralization. There are many approaches to the evaluation (verification) of the degree of protection of programs against possible attacks. First of all, this is fault Injection (FI) simulation techniques [1]. Main drawback of the FI is necessity to have different expensive software that can be not used to solve other design problems, in particular for functional verification and testing. Also, due to the similarity between system failures because of intentional attacks and those due to accidental component failures, reliability/availability-like models to evaluate system survivability are used in the security design [2]. But they are based on Continuous Time Markov Chain (CTMC), identification of which deals with some technical difficulties.