A Mathematical Modeling of Exploitations and Mitigation Techniques Using Set Theory

摘要: One of the most challenging problems in computer security is formalization vulnerabilities, exploits, mitigations and their relationship. In spite various existing researches theories, a mathematical model that can be used to quantitatively represent analyze exploit complexity mitigation effectiveness still absence. this work, we introduce novel way modeling exploits techniques with concepts from set theory big O notation. The proposed establishes formulaic relationships between primitives objectives, enables quantitative evaluation vulnerabilities features system. We demonstrate application two real world techniques. It serves as first step toward comprehensive understanding exploitations mitigations, which will largely benefit facilitate practice system assessment.