A systematic process-model-based approach for synthesizing attacks and evaluating them

摘要: This paper describes a systematic approach for incrementally improving the security of election processes by using model process to develop attack plans and then incorporating each plan into determine if it can complete successfully. More specifically, our first applies fault tree analysis detailed find vulnerabilities that an adversary might be able exploit, thus identifying potential attacks. Based on such vulnerability, we formally evaluate process's robustness against plan. If appropriate, also propose modifications reapply ensure will not succeed. Although is described in context domain, would seem effective analyzing vulnerability other domains.